# Deimos AI LLC · the whole site as text > Every page of https://www.deimoscore.com/ in one file, in sitemap order, generated at build from the pages themselves. The summary with links is https://www.deimoscore.com/llms.txt; each page's own URL is the canonical copy. About Deimos AI LLC: Deimos AI LLC (California, USA), founded in 2026, builds software that keeps people in charge of AI agents: seen, approved, stoppable and provable. Its instruments sit in three divisions. Control: Clockford™, an app to see, approve and stop AI agents from a phone, whose private beta opens Nov 10th, 2026; Ratchet, a live effect gate that starts a retried charge, deploy or email at most once; and Crimp, an open-source decision gate whose decisions withdraw themselves when a fact breaks. Evidence: Marklode, startup due diligence checked by a person. Research: files from the Lab, each published with its status. Ratchet and Crimp hold self-certified OpenSSF Best Practices Silver badges. The Record lists its claims, each with source and date. --- # Deimos AI LLC · Mission control for the age of AI agents URL: https://www.deimoscore.com/ Updated: 2026-10-20T13:42:00Z Deimos AI LLC · Est. 2026 · Defence only ## We keep watch. Mission control for the age of AI agents. Deimos AI LLC builds the instruments that keep people in charge of AI agents: seen, approved, stoppable and provable. Every claim on this site carries its source. [See the instruments →](https://www.deimoscore.com/#divisions) [Check the record](https://www.deimoscore.com/record/) Deimos is Greek for dread: the smaller moon of Mars, named for the fear that rides into battle. We took the name on purpose. AI agents now charge cards, ship code and send email while their owners sleep. We build so that nobody has to feel it. §02 / The divisions ### One company. Three divisions. Nine instruments. Every instrument answers to the same four words: seen, approved, stoppable, provable. Division I · OVERSIGHT #### Clockford™ See, approve and stop your AI agents from your phone, whichever company built them. SCHEDULED - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/clockford/) Division I · ONCE #### Ratchet The effect gate for AI agents. A retried charge, deploy or email happens at most once. LIVE - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/ratchet/) Division I · ACCOUNTABLE #### Crimp An open-source decision gate. The rule is sealed before the outcome is known; when a fact breaks, the decision withdraws itself. OPEN SOURCE - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/crimp/) Division II · RECON #### Marklode Startup due diligence before the pitch: competitors, prior art, the hardest attacks, and a verdict. LIVE - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/marklode/) Division II · BASELINE #### M.A.X Offline-first analysis of video you already have, each person against their own baseline. IN THE LAB - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/max/) Division II · LOOKOUT #### Project Vessel Public-source early warning, reviewed by people. It surfaces; a person decides. IN THE LAB - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/vessel/) Division III · CRITERIA #### The Pastel Series Revisiting classic security criteria for a world where the actor may be a person or an AI agent already inside. RESEARCH - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/pastel/) Division III · RESONANCE #### NeuroPhonics Module 1 Find a faint resonance in noise. Refuse when you can’t. A signal-processing simulation. SIMULATION - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/neurophonics/) Division III · SEALED #### The Lab Codenames only until each one stands on its own. SEALED - seen - approved - stoppable - provable [Open the file](https://www.deimoscore.com/lab/) - Seen You can see what every agent is doing. - Approved Nothing that matters happens without a yes. - Stoppable A retry can't do it twice; a budget can't be crossed. - Provable If it matters, there is a record you can check. §03 / The Gate Room ### Push an action through the gate. Pick something an agent might do. Then do it the way agents do: fast, repeatedly, sometimes on a fact that has stopped being true. Simulation · runs in your browser · nothing leaves this page The action Charge a card · $40 Deploy to production Email 2,000 customers - Waiting for an action. Outcomes follow each instrument's documented behaviour. “Retry ×100” on the card replays Ratchet's live worked scenario (100 attempts → 20 executed, 80 denied, 341 ms) from ratchetgate.com; no other figures are invented. §04 / Status board ### Go / no-go. Instrument Division Status Evidence As of CLOCKFORD I · CONTROL SCHEDULED Beta Nov 10th, 2026 17 OCT 2026 RATCHET I · CONTROL LIVE Self-certified OpenSSF Silver · 1,000 free effects / mo 18 OCT 2026 CRIMP I · CONTROL OPEN SOURCE v0.1.0 signed · self-certified OpenSSF Silver 13 SEP 2026 MARKLODE II · EVIDENCE LIVE 45,156 MCP servers counted 17 OCT 2026 M.A.X II · EVIDENCE IN THE LAB Packaged · not released 18 OCT 2026 VESSEL II · EVIDENCE IN THE LAB Thresholds not yet measured 18 OCT 2026 PASTEL SERIES III · RESEARCH RESEARCH Unpublished research 18 OCT 2026 NEUROPHONICS III · RESEARCH SIMULATION Synthetic signals only 18 OCT 2026 THE LAB III · RESEARCH SEALED Codenames withheld 18 OCT 2026 Document FR-0 · Deimos AI LLC · Flight Rules · Rev A · 2026 ### Written before the launch. Followed during it. - FR-1 People stay in charge of what matters. An agent can propose anything. A person decides what can't be undone. Enforced in [Clockford™](https://www.deimoscore.com/clockford/) · [Vessel](https://www.deimoscore.com/vessel/) (a person reviews every flag) - FR-2 Assume something is already inside. We design every system as if the attacker has a key. Then we make the key not enough. See [Security](https://www.deimoscore.com/security/) · [the Pastel Series](https://www.deimoscore.com/pastel/) - FR-3 If it matters, make it provable. Claims come with a record you can replay, a source you can open, a seal you can check. Enforced in [Crimp](https://www.deimoscore.com/crimp/) · [Ratchet](https://www.deimoscore.com/ratchet/) · [the Record](https://www.deimoscore.com/record/) - FR-4 Bend, don't break. When we don't know, we say so. Unknown never quietly becomes yes, and never quietly becomes no. [Ratchet](https://www.deimoscore.com/ratchet/) (indeterminate) · [Crimp](https://www.deimoscore.com/crimp/) (unknown never seals) · [Vessel](https://www.deimoscore.com/vessel/) (not assessed) · [NeuroPhonics](https://www.deimoscore.com/neurophonics/) (refuses at low SNR) Signed · Deimos AI LLC Approved §06 / From the Record ### The record, as of today. [Marklode · census 45,156 MCP servers behind 156,111 public registry entries. Metadata only; no server is ever contacted. Verified Marklode census · Oct 2026](https://www.deimoscore.com/record/) [Ratchet · published run 20 / 100 Executed, when a simulated runaway agent fired 100 concurrent charge attempts against a surge ceiling of 20 per hour. 80 were denied at the gate; all settled in 341 ms. VERIFIED Ratchet note · published run](https://www.deimoscore.com/record/#claim-ratchet-run-executed) [Tonight's Deimos 12.8 min For a signal from Earth to reach the moon we're named after, tonight. Live NASA/JPL Horizons, body 402](https://www.deimoscore.com/record/ephemeris/) §07 / Crew ### A small crew. A long watch. Deimos AI LLC was founded in 2026, and the company signs its work. We build with AI every day and check its work every day: independent reviewers, red-team drills, and nothing ships on a claim we can't prove. Defence only. Money never buys a score. Mission log - 2026 Ratchet's effect gate goes live, with a free tier and an MCP server. - 2026 · SEP Marklode counts the MCP registry, then starts writing verdicts. - 2026 · SEP 13 Crimp v0.1.0: a signed, open-source release. - 2026 · OCT Clockford™ opens 10 founding seats. - 2026 · NOV 10 Clockford™ private beta. Briefing / Q&A ### Briefing: common questions #### What does Deimos AI do? Deimos AI LLC builds the controls that keep people in charge of what their AI agents do: seen, approved, stoppable and provable. The work runs in three divisions. Control: [Clockford™](https://www.deimoscore.com/clockford/), [Ratchet](https://www.deimoscore.com/ratchet/) and [Crimp](https://www.deimoscore.com/crimp/). Evidence: [Marklode](https://www.deimoscore.com/marklode/), [M.A.X](https://www.deimoscore.com/max/) and [Project Vessel](https://www.deimoscore.com/vessel/). Research: [the Pastel Series](https://www.deimoscore.com/pastel/), [NeuroPhonics](https://www.deimoscore.com/neurophonics/) and [the Lab](https://www.deimoscore.com/lab/). #### What does “mission control for the age of agents” mean? AI agents now charge cards, ship code and send email while you sleep. Mission control is the layer that keeps watch: you see what every agent is doing, nothing that matters happens without your yes, any agent can be stopped, and there is a record you can check afterwards. #### How do you keep a human in the loop for AI agents? Our first flight rule: an agent can propose anything, a person decides what can’t be undone. Clockford™ lets you approve and stop agents from your phone. Ratchet puts one gate in front of every irreversible action. Crimp makes the decision come from a sealed rule and checked facts, never from the agent’s own verdict. #### Which Deimos products can I use today? Ratchet is live, with 1,000 gated effects a month free and no card. Crimp is open source under Apache-2.0, with a signed v0.1.0 release. Marklode is live and taking briefs. The Clockford™ private beta opens Nov 10th, 2026. M.A.X is still in the lab. #### Is Deimos AI’s work independently checked? Ratchet and Crimp both hold a self-certified OpenSSF Best Practices Silver badge ([project 14440](https://www.bestpractices.dev/projects/14440) and [project 14613](https://www.bestpractices.dev/projects/14613)). Every Marklode finding is checked by a person and linked to its source. Our rule: don’t trust us; check us. #### Who is behind Deimos AI LLC? A small crew. Deimos AI LLC was founded in 2026, and the company signs everything it publishes. We build with AI every day and check its work every day: independent reviewers, red-team drills, and nothing ships on a claim we can’t prove. #### Why the name Deimos? Deimos is Greek for dread, and the name of the smaller moon of Mars. We took it on purpose: agents act while you sleep, and we build so you never have to feel that dread. #### How do I contact Deimos AI? Pick the door that fits: claim a founding seat at [clockford.com](https://clockford.com), gate your first action free at [ratchetgate.com](https://ratchetgate.com), brief [Marklode](https://marklode.com), or message [Deimos AI on LinkedIn](https://www.linkedin.com/company/deimoshq/). §09 · Uplink ### Open a channel. Building with agents? Pick the door that fits. Every one of them leads back here. [Claim a founding seat ↗](https://clockford.com/founding/) [Gate your first action free](https://ratchetgate.com) [Brief Marklode](https://marklode.com) [Deimos on LinkedIn](https://www.linkedin.com/company/deimoshq/) [Read the Record](https://www.deimoscore.com/record/) --- # Clockford™ · See, approve and stop AI agents from your phone URL: https://www.deimoscore.com/clockford/ Updated: 2026-10-20T03:08:24Z Status: SCHEDULED Clockford™ · Oversight Something is keeping watch. It isn’t awake yet. Still in shadow · opens Nov 10th, 2026 The watch winds to twelve At twelve the dial shows the time left until the private beta opens, Nov 10th, 2026 (08:00 UTC). Clockford™ · Oversight Division I · Control ## See, approve and stop your AI agents. From your phone. Whichever company built them. Clockford™ is the oversight instrument from Deimos AI LLC. The private beta opens Nov 10th, 2026, with ten founding seats. SCHEDULED Opens · Nov 10th, 2026 1 Founding seats · 10 2 PATENT PENDING METHODS WITHHELD - 1 Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 - 2 Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 [Read the founding brief ↗](https://clockford.com/founding/) [clockford.com ↗](https://clockford.com) [Open the file →](https://www.deimoscore.com/clockford/#file) §01 / The file ### What we can tell you. And what we can’t, yet. Plate CF-01 · The closed caseback. An engine-turned watch back with a plain cartouche: withheld until launch, the opening date, and ten diamonds for the ten founding seats. No movement, no mechanism, no method. That’s the point. Source · Deimos AI LLC · opening date and seats as in [the claims ledger](https://www.deimoscore.com/record/#ledger) File CF-01 · Clockford™ · Pre-launch release · Rev A We show outcomes and proof, never methods. Outcomes released - 01:00 Outcome See every agent you run, live, in one place. - 02:00 Outcome Nothing that matters happens without your yes. - 03:00 Method WITHHELD UNTIL LAUNCH - 04:00 Outcome Stop an agent from your phone. - 05:00 Outcome A record of what happened that you can check for yourself. - 06:00 Method WITHHELD UNTIL LAUNCH - 07:00 Works with Agents from any company. Whoever built them. - 08:00 Method WITHHELD UNTIL LAUNCH - 09:00 Built by Deimos AI LLC. - 10:00 Patent Pending. No number is published. - 11:00 Seats Ten Founding Startups, by invitation. - 12:00 Opens Nov 10th, 2026, at midnight Pacific. Methods stay withheld until launch. Every agent works for you. §02 / Founding Startups ### Ten seats. Small crews first. US startups of 2 to 20 people, already running at least one AI agent, with a founder who can give about 20 minutes a week. - 01 Based in the United States - 02 2 to 20 people3 - 03 Already running at least one AI agent - 04 A founder who can give about 20 minutes a week 4 - 3 Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 - 4 Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 Outside the US? Not in this first wave. Later waves will open to founders everywhere. - 01 - 02 - 03 - 04 - 05 - 06 - 07 - 08 - 09 - 10 10 founding seats · offered by invitation §03 / The Line ### What it does. What it never claims. #### What it does - Shows every agent you run, live, in one place. - Waits for your yes before anything that matters. - Stops an agent from your phone. - Keeps a record of what happened that you can check yourself. - Works with agents from any company, whoever built them. #### What it never claims - It does not decide for you. What matters waits for a person. - It does not publish how it works. Methods are withheld until launch. - It does not claim a launch it hasn’t had. The private beta opens Nov 10th, 2026. - It does not ask you to take our word. The record is yours to check. [Flight Rule plate · Document FR-0 Clockford™ answers to FR-1: People stay in charge of what matters. Read the flight rules →](https://www.deimoscore.com/#flight-rules) §04 / Evidence ### Don’t trust us. Check us. SCHEDULED Nov 10th, 2026 The private beta opens at midnight Pacific, 08:00 UTC. Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 SCHEDULED 10 Founding Startup seats in the first wave, by invitation. Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 VERIFIED 2 to 20 People on a Founding Startup team, US-based, already running an AI agent. Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 PATENT PENDING Pending Patent pending. No number is published, and no method is described here. Source · Deimos AI LLC Briefing / Q&A ### Briefing: common questions #### What is Clockford™? Clockford™ is a new product from Deimos AI LLC for the people who run AI agents. It lets you see what your agents are doing, approve what matters and stop them from your phone, whichever company built them. #### Can I oversee my AI agents from my phone? That is the outcome Clockford™ is built for: every agent you run, live, in one place; nothing that matters happens without your yes; any agent stopped from your phone; and a record of what happened that you can check for yourself. #### When does the Clockford™ private beta open? The private beta opens on Nov 10th, 2026, at midnight Pacific (03:00 Eastern). #### Who can join the Clockford™ founding beta? The first wave is 10 Founding Startups: small US startups of 2 to 20 people already running at least one AI agent, with a founder who can give about 20 minutes a week of feedback. Technical and non-technical founders are equally welcome. #### How do I get a founding seat? There is no sign-up form yet. Seats are offered by invitation and announced first on Instagram and X at @clockfordtown. The [founding brief](https://clockford.com/founding/) has the details. #### Does Clockford™ work with agents from any company? Yes. It is built for the agents your team already uses, whichever company made them. #### How does Clockford™ work? We show outcomes and proof, never methods. How it works is withheld until launch, and the patent is pending. #### I’m outside the US. Can I join? Not in this first wave. Later waves will open to founders everywhere. Oversight Nov 10th, 2026 ### Agents never sleep. Now neither does your oversight. Ten founding seats for small US crews already running AI agents. The brief has everything we can say before launch. [Read the founding brief ↗](https://clockford.com/founding/) Seats are announced first on [Instagram](https://www.instagram.com/clockfordtown/) and [X](https://x.com/clockfordtown) at @clockfordtown. Founding card · Clockford™ / Oversight UTC --:--:-- Status · SCHEDULED PATENT PENDING Opens · Nov 10th, 2026 Midnight Pacific · 08:00 UTC Seats · 10 · by invitation Crew · 2 to 20 people · US · at least one agent running Asks · about 20 minutes a week from a founder Methods · WITHHELD UNTIL LAUNCH Source · [clockford.com founding brief](https://clockford.com/founding/) · as of 2026-10-18 --- # Ratchet · The effect gate for AI agents: act at most once URL: https://www.deimoscore.com/ratchet/ Updated: 2026-10-20T13:42:00Z Status: LIVE Ratchet · Once Division I · Control ## Your agent retried. Do you know what it already did? Ratchet is the effect gate for AI agents. A retried charge, deploy or email is started at most once. When nobody can know whether it happened, Ratchet says indeterminate instead of guessing. LIVE Free · 1,000 effects / month 1 Licence · Apache-2.0 2 OpenSSF, self-certified · Silver · 14440 3 Speaks · HTTPS · MCP - 1 Source · [ratchetgate.com pricing](https://ratchetgate.com/pricing) · as of 2026-10-20 - 2 Source · [GitHub repository](https://github.com/thearchitect0x-glitch/ratchet) · as of 2026-10-18 - 3 Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14440) · as of 2026-10-20 [Open ratchetgate.com ↗](https://ratchetgate.com) [Source on GitHub ↗](https://github.com/thearchitect0x-glitch/ratchet) [Read the docs ↗](https://ratchetgate.com/docs) §01 / The Pawl · Replay the run ### A hundred attempts. A wheel that only turns forward. Ratchet’s published run against its live service: a simulated runaway agent (a script standing in for an agent loop) fires a hundred distinct charge attempts at once, against a ceiling of 20 an hour. Press Replay, or scrub through it. Published totals · 1 Sep 2026 SIMULATION Per-attempt order and spacing A grid of 100 attempts in gate order: the first 20 executed, the other 80 denied at the gate. Only the totals are published; the order is a simulation. 1 Click pawl. The wheel can’t turn back. 2 Ceiling pawl. One past the ceiling it drops, and the wheel can’t go further. Attempt 100 / 100 Executed 20 Denied 80 Cleared to execute 20 Replay the published run Replay speed 20× slower Real time Scrub · gate order (simulated) Settled in 341 ms Replays the published totals in your browser. It doesn’t run Ratchet, and nothing leaves this page. - Attempts 1–20 · Executed #### Inside the ceiling, each one acts. Each distinct charge asks the gate first and gets execute. The wheel turns one tooth for each. - Attempt 21 · The breaker opens #### One past the ceiling. The breaker’s record says why: observed 21 · threshold 20 · action deny - Attempts 21 –100 · Denied #### 80 answered at the gate. The wheel doesn’t move. One effect type stops; the rest of the workspace keeps running. 100 attempts · 20 executed · 80 denied · 341 ms Cleared to execute: 20, the transcript’s “reached the vendor”. Held back at the gate: 80. The script calls no vendor, so nothing was charged. Source · [Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop)](https://ratchetgate.com/notes/what-happens-when-step-five-fails) · as of 2026-10-20 [Try it free: 1,000 effects a month (opens in a new tab)](https://ratchetgate.com) Replay Totals copied from Ratchet’s published transcript, [What happens when step five fails (opens in a new tab)](https://ratchetgate.com/notes/what-happens-when-step-five-fails) (ratchetgate.com, section “Two: a loop that will not stop”), fetched 20 Oct 2026. It prints totals, not each attempt’s time, so the order and spacing here are a simulation. Run file [ratchet-run.json](https://www.deimoscore.com/data/ratchet-run.json) · sha256 of the bytes replayed computed when it loads §02 / The retry storm ### Your agent is about to charge a card. Beat 1 · One call, before acting #### It asks first. Ratchet takes a durable record and hands back a lease. That’s the only call that costs anything. Beat 2 · Your code, your vendor #### Now it acts. Ratchet never touches the vendor. No credentials, no outbound access, no proxy. Your code does the work and reports what happened. Beat 3 · Where the retries go #### Then the retries arrive. A supervisor re-runs the task. Two workers race. The agent wakes from a crash. Every one of them gets the recorded answer: duplicate, replay the result, do not act. Beat 4 · The honest unknown #### And when it crashes mid-charge? Ratchet doesn’t guess. The effect becomes indeterminate, a known unknown, and your policy decides what happens next. Never a silent retry. §03 / What’s in the gate ### Ask. Act. Report. Everything else follows. 01 · At most once #### A retry gets the same answer. A restart, a re-run and two workers racing all get the recorded result. The same real-world action is started at most once. 02 · Honest unknowns #### When nobody can know, it says so. If the agent dies before reporting, the effect is marked indeterminate instead of guessed. You choose: block, retry, or check first. 03 · Budgets #### A spend limit the agent can’t raise. Give a task a budget and the gate refuses the step that would cross it. Rate caps and a breaker for runaway surges come with it. 04 · Memory #### It remembers for you. An agent that lost its context asks what it already did. One call, not a re-derivation. 05 · Reversible groups #### Step five fails? Here’s the undo plan. Declare the steps as one unit and how to undo each. Ratchet hands back the rollback in reverse order, and each undo is gated too, so no double refunds. 06 · Reconcile #### Catch what skipped the gate. Compare the vendor’s own records with what Ratchet approved, and find any action that went around it. DWG RT-01. The wheel only turns forward: one tooth per effect, and the locking face blocks the way back. This draws the metaphor, not the service. Drawing · Deimos AI LLC, after this page’s hero object (18 teeth, 20° pitch). Ratchet promises at most once; never “exactly once”. §04 / The Line ### What it does. What it never claims. #### What it does - Starts a retried charge, deploy or email at most once. - Marks an effect indeterminate when nobody can know whether it happened. - Refuses the step that would cross a budget. - Hands back the undo plan for a reversible group, and gates each undo. - Reconciles the vendor’s records against what it approved. #### What it never claims - It never guesses whether an effect happened. - It never touches your vendor: no credentials, no outbound access, no proxy. - It does not stop an action that goes around the gate. Reconcile finds it afterwards. - It does not undo anything by itself. Your code runs the undo plan, through the gate. [Flight Rule plate · Document FR-0 Ratchet answers to FR-3: If it matters, make it provable, and FR-4: Bend, don’t break. Read the flight rules →](https://www.deimoscore.com/#flight-rules) §05 / Evidence ### Don’t trust us. Check us. VERIFIED 20 / 100 Executed out of 100 concurrent charge attempts against a surge ceiling of 20 per hour; 80 denied at the gate, all settled in 341 ms. Source · [Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop)](https://ratchetgate.com/notes/what-happens-when-step-five-fails) · as of 2026-10-20 VERIFIED Silver Self-certified OpenSSF Best Practices badge, project 14440. Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14440) · as of 2026-10-20 VERIFIED 1,000 Gated effects a month on the free plan. No card. Source · [ratchetgate.com pricing](https://ratchetgate.com/pricing) · as of 2026-10-20 VERIFIED 2 HTTP calls to gate an action: one before, one after. Source · [ratchetgate.com](https://ratchetgate.com) · as of 2026-10-18 VERIFIED Apache-2.0 Open source on GitHub. The MCP server is on npm as ratchet-mcp. Source · [GitHub repository](https://github.com/thearchitect0x-glitch/ratchet) · as of 2026-10-18 Package · [npmjs.com/package/ratchet-mcp](https://www.npmjs.com/package/ratchet-mcp) Briefing / Q&A ### Briefing: common questions #### What is an effect gate? An effect gate sits in front of an action that can’t be taken back. Before acting, the agent asks Ratchet; Ratchet takes a durable record and hands back a lease. The agent’s own code does the work and reports what happened. Ratchet never touches the vendor: no credentials, no outbound access, no proxy. #### How do I stop an AI agent from charging a card twice? Gate the charge. One call before acting, one after. A retry, a supervisor re-run, a restart after a crash or two workers racing all get the recorded answer: duplicate, replay the result, do not act. The same real-world action is started at most once. #### How does idempotency work for AI agents? Ratchet keys every effect on an idempotency key. The first ask about a key is the only thing that is metered; duplicate suppression, in-flight checks, retries, reports and reads are free. Unlike a bare idempotency key, Ratchet also covers the case where the agent dies before reporting. #### What happens if the agent crashes mid-action? Ratchet doesn’t guess. The lease expires with nothing reported and the effect becomes indeterminate: a known unknown. Your policy for that effect type decides what happens next: block, retry, or check first. Never a silent retry. #### Can I cap what an AI agent spends? Yes. Give a task a budget and the gate refuses the step that would cross it; rate caps and a breaker for runaway surges come with it. In a published run against the live service, a simulated runaway agent (a script standing in for an agent stuck in a loop) fired 100 concurrent charge attempts against a surge ceiling of 20 per hour: 20 executed, 80 were denied at the gate, and all settled in 341 ms. #### Can an AI agent ask a person before it acts? Yes. The gate has more than one answer. Besides execute, Ratchet can return duplicate, in flight, blocked, denied or approval required, and approval required holds the action until a person says yes. Six answers; only one means go. #### Does Ratchet work with MCP, and is it open source? Yes to both. Ratchet speaks plain HTTPS, or MCP over stdio and streamable HTTP, with no SDK required; the MCP server is on npm as [ratchet-mcp](https://www.npmjs.com/package/ratchet-mcp). The [source is on GitHub](https://github.com/thearchitect0x-glitch/ratchet) under Apache-2.0, and the project holds a self-certified OpenSSF Best Practices Silver badge ([project 14440](https://www.bestpractices.dev/projects/14440)). #### How do I start with Ratchet? Create a free workspace at [ratchetgate.com](https://ratchetgate.com): 1,000 gated effects a month, no card, an email is all it takes. Or let your agent call the gate first, and a real workspace comes back with the decision. Once Ask before you act ### Gate your first action. Free, no card. The free plan covers 1,000 gated effects a month, with 2 HTTP calls per action: one before your agent acts, one after. [Create a free workspace ↗](https://ratchetgate.com) [Docs](https://ratchetgate.com/docs) · [Source on GitHub](https://github.com/thearchitect0x-glitch/ratchet) · [ratchet-mcp on npm](https://www.npmjs.com/package/ratchet-mcp) Channel card · Ratchet / Once UTC --:--:-- - Before it actsYour agent asks the gate and gets a lease. - Your code actsRatchet never touches the vendor. - After it actsYour code reports; a retry gets the recorded answer. Status · LIVE HTTP calls · 2 per action Free plan · 1,000 effects / month Licence · Apache-2.0 MCP · ratchet-mcp Source · [ratchetgate.com](https://ratchetgate.com) · as of 2026-10-18 --- # Crimp · Open-source decision gate for AI agents · Deimos AI URL: https://www.deimoscore.com/crimp/ Updated: 2026-10-20T13:42:00Z Status: OPEN SOURCE Crimp · Accountable Division I · Control ## When a fact breaks, the decision withdraws itself. Crimp is an open-source decision gate for AI agents. The agent brings the rule and the facts, never a conclusion. The rule is sealed before anyone knows the outcome, and Crimp keeps watching the facts it stood on. OPEN SOURCE Licence · Apache-2.0 1 Release · v0.1.0 · signed · 13 Sep 2026 2 OpenSSF, self-certified · Silver · 14613 3 PATENT PENDING - 1 Source · [GitHub repository LICENSE](https://github.com/thearchitect0x-glitch/crimp/blob/main/LICENSE) · as of 2026-10-18 - 2 Source · [GitHub releases](https://github.com/thearchitect0x-glitch/crimp/releases) · as of 2026-10-18 - 3 Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14613) · as of 2026-10-20 [Crimp on GitHub ↗](https://github.com/thearchitect0x-glitch/crimp) [See it decide →](https://www.deimoscore.com/crimp/#chain) §01 / Chain of custody ### One decision, start to finish. EXAMPLE DECISION EXAMPLE — not a real decision. The seal string is an example, not a hash. Example decision, not a real one: a benefit-eligibility rule is sealed before the outcome is known, three facts are crimped to the decision, one fact breaks and the decision withdraws, and when a fact comes back unknown the decision stays unsealed. - 01 · Inputs #### The agent brings the rule and the facts. Here, a benefit-eligibility rule and three facts about one household. Rule v3 received, not sealed - Fact 1 3 people - Fact 2 under the limit - Fact 3 verified Decision · example — waiting for the rule - 02 · Refused #### Never a conclusion. If an agent tries to hand over its own verdict, Crimp refuses it. Agents bring facts, not verdicts. Rule v3 received, not sealed - Fact 1 3 people - Fact 2 under the limit - Fact 3 verified Decision · example — the agent’s verdict is refused - 03 · Sealed first #### The rule is sealed before the outcome is known. Nobody can tune the rule after they’ve seen which way it goes. Rule v3 sealed · example seal 9f3c·a07e·51d2·e21a - Fact 1 3 people - Fact 2 under the limit - Fact 3 verified Decision · example — rule sealed · outcome unknown - 04 · Crimped #### Crimp works out the decision. Each fact is crimped to the decision it supports, so the decision always knows what it stands on. Rule v3 sealed - Fact 1 3 people · crimped - Fact 2 under the limit · crimped - Fact 3 verified · crimped Decision · example APPROVED 3 facts crimped - 05 · A fact breaks #### The decision withdraws itself. When a fact stops holding, nobody has to remember to go back. The decision pulls itself and asks again. Rule v3 sealed - Fact 1 3 people · crimped - Fact 2 changed · broken - Fact 3 verified · crimped Decision · example WITHDRAWN fact 2 broke · deciding again - 06 · Unknown never seals #### Unknown never seals. Asked again, one fact comes back unknown. The wax stays soft: the decision waits for the fact instead of collapsing into a no. Rule v3 sealed - Fact 1 3 people · crimped - Fact 2 under the limit · re-checked - Fact 3 UNKNOWN Decision · example NOT SEALED waiting for fact 3 §02 / Break a fact ### Break a fact. Watch the decision withdraw. An example resupply request. A sustainment agent wants to send a requisition for a forward unit, and hands Crimp the rule and the three facts it relied on: stock level, unit location, priority. Seal the rule, let Crimp decide, then change the world under it. Runs Crimp’s evaluator Simulation · seal held locally Example request The decision is computed by Crimp’s own evaluator; sealing here is local to your browser. Nothing leaves this page. Code · [evaluate.ts (opens GitHub in a new tab)](https://github.com/thearchitect0x-glitch/crimp/blob/0f71423d98c51c64584d2ef5a0bafdac5c2963ae/src/domain/evaluate.ts) and [rule.ts (opens GitHub in a new tab)](https://github.com/thearchitect0x-glitch/crimp/blob/0f71423d98c51c64584d2ef5a0bafdac5c2963ae/src/domain/rule.ts) from Crimp at commit 0f71423 (the same files as tag v0.1.0), unchanged; ids.ts with its one node:crypto import swapped for Web Crypto · Apache-2.0 This instrument runs Crimp’s code in your browser and needs JavaScript. Without it, this is the request at rest: the rule as written, three attested facts, nothing sealed. Rule · resupply.request Not sealed #### Send the requisition when all three hold. - 01 stock.days_of_supply lte 3 not evaluated Three days of supply or less on hand. - 02 unit.location eq "site_7" not evaluated The unit is still at site_7, where the requisition ships. - 03 request.priority in ["urgent","priority"] not evaluated The request is marked urgent or priority. all Evaluated when Crimp decides. not evaluated Rule hash · SHA-256 of Crimp’s canonical form Computed when the rule is sealed. The rule as written · JSON { "all": [ { "fact": "stock.days_of_supply", "op": "lte", "value": 3 }, { "fact": "unit.location", "op": "eq", "value": "site_7" }, { "fact": "request.priority", "op": "in", "value": ["urgent", "priority"] } ] } Canonical form, as hashed Decision · example No determination — Seal the rule first. Nobody knows the outcome yet. Not run evaluate(rule, facts) First seal the rule: it is fixed before anyone sees the outcome. Fact 1 · Stock level stock.days_of_supply 2 int 2 days of supply on hand attested Holds Unknown Broken Fact 2 · Unit location unit.location "site_7" str Position report: at site_7 attested Holds Unknown Broken Fact 3 · Priority request.priority "urgent" str Marked urgent attested Holds Unknown Broken From the agent Not handed in “Verdict: approve. Send the requisition.” Handed in There is no other door: evaluate(rule, facts) takes a rule and facts, and nothing else. An example resupply request, run by Crimp’s own evaluator in this page. A rule with three clauses, three facts you can set to holds, unknown or broken, a decision card, and an agent card that tries to hand over a verdict. Decision record · Crimp’s format, partial Made in your browser · unsigned No determination yet. Crimp writes one only when the rule holds against the facts. A determination never carries the facts’ values: only a SHA-256 commitment to each one, so anyone holding the values can check it, and nobody can read them off the record. Left out of this record: the reasons (Crimp derives them in explain.ts, which this page does not carry), and each fact’s named source and admissibility class, since no real system attested these example facts. So the verifier’s two checks on reasons do not run on this record. Available while a determination stands sealed. Custody track · this request T+00:00 - Nothing has happened to this request yet. §03 / Where it’s for ### Decisions that change someone’s week. Benefits. Coverage. Prior authorisation. When an automated system says yes or no to a person, that answer should come with its rule, its facts, and a way to take it back the moment it stops being true. Crimp is built for the teams that run those decisions and the people who have to answer for them. Every Crimp decision carries - The rule, sealed before the outcome. - The facts, each one crimped to the decision. - The outcome, worked out by Crimp, not claimed by the agent. - A tripwire on every fact: when it breaks, the decision withdraws. Plate CR-01 · Example decision. One decision as a crimped terminal, in three states: the rule is sealed before the outcome is known; the decision withdraws itself when fact 2 breaks; unknown never seals, so while fact 3 is unknown the wax stays soft. Example only · no real rule, facts or seal. §04 / The Line ### What it does. What it never claims. #### What it does - Takes the rule and the facts from the agent, never its conclusion. - Seals the rule before anyone knows the outcome. - Works out the decision and crimps each fact to it. - Withdraws the decision when a fact it stood on breaks. - Leaves a decision unsealed while a fact is unknown. #### What it never claims - It never takes an agent’s verdict as the decision. - It never turns an unknown into a no, or into a yes. - It never lets a rule change after the outcome is seen. - The examples on this page are not real decisions. The chain’s seal string is not a hash; the hashes in §02 are real, computed in your browser from the example. [Flight Rule plate · Document FR-0 Crimp answers to FR-3: If it matters, make it provable, and FR-4: Bend, don’t break. Read the flight rules →](https://www.deimoscore.com/#flight-rules) §05 / Evidence ### Don’t trust us. Check the release. VERIFIED v0.1.0 Signed release, published 13 Sep 2026. Source · [GitHub releases](https://github.com/thearchitect0x-glitch/crimp/releases) · as of 2026-10-18 VERIFIED Silver Self-certified OpenSSF Best Practices badge, project 14613. Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14613) · as of 2026-10-20 VERIFIED Open Apache-2.0 licence. Read it, run it, fork it. Source · [GitHub repository LICENSE](https://github.com/thearchitect0x-glitch/crimp/blob/main/LICENSE) · as of 2026-10-18 PATENT PENDING Pending Patent pending. The code stays open. Source · Deimos AI LLC Verify the release yourself · v0.1.0 The release archive carries a Sigstore attestation bound to the GitHub workflow run that built it. There is no key to import. gh attestation verify \ crimp-v0.1.0.tar.gz \ --repo thearchitect0x-glitch/crimp To check the archive is byte-for-byte what was published: sha256sum -c crimp-v0.1.0.tar.gz.sha256 SHA-256 · crimp-v0.1.0.tar.gz a76f21d53944…38a6 VERIFIED Source · [GitHub release asset crimp-v0.1.0.tar.gz.sha256](https://github.com/thearchitect0x-glitch/crimp/releases/tag/v0.1.0) · as of 2026-10-18 Determination Verifier Crimp’s offline checker · runs in your browser #### Check a determination without trusting whoever issued it. Crimp ships a verifier that needs no account, no server and nothing from the issuer. Give it a determination and the values you hold: it recomputes the rule hash and every fact commitment, and re-runs the sealed rule. It is a second implementation of Crimp’s published format, written from the specification rather than from Crimp’s code. Every time it loads it runs checks drawn from the format’s published conformance vectors and shows the score on its self-test badge; it leaves out the admission vectors, which test the check made before a rule is sealed, not a verifier. Input self-test… This browser’s Web Crypto has no Ed25519, so the self-test’s signature vectors cannot pass here and the badge falls short of full marks. That is this browser, not the record or the format. The determination Your own record of the values Tamper with the example Verification Its code makes no network request Not run yet No issuer keys here. This page never checks a signature, so “Verifies” means the record agrees with itself and with the values you hold. It does not mean Crimp, or anyone, issued it. The verifier is Crimp’s own JavaScript, run in your browser; with JavaScript off it cannot check anything. Its source is [web/verify.html on GitHub (opens in a new tab)](https://github.com/thearchitect0x-glitch/crimp/blob/0f71423d98c51c64584d2ef5a0bafdac5c2963ae/web/verify.html). Code · Crimp’s [web/verify.html (opens GitHub in a new tab)](https://github.com/thearchitect0x-glitch/crimp/blob/0f71423d98c51c64584d2ef5a0bafdac5c2963ae/web/verify.html) at commit 0f71423, unchanged, moved into a file so this site’s Content-Security-Policy will run it · Apache-2.0. Its code makes no network request: once the self-test badge shows a score, you can go offline and it still checks. A record with no signature can be internally consistent and still say nothing about who issued it; the verifier says so. Two things around it are this page’s, not Crimp’s: the count beside the verdict, which keeps checks that passed apart from checks that were not made (the script counts both as passed), and the screen-reader labels on each step. Briefing / Q&A ### Briefing: common questions #### What is a decision gate for AI agents? A decision gate takes the decision away from the agent. With Crimp, the agent submits the rule it is applying and the facts it is applying it to, never a conclusion. Crimp evaluates the rule and works out the outcome. There is no field in which an agent can assert a verdict. #### What is Crimp? Crimp is an open-source decision gate from Deimos AI LLC: Apache-2.0, signed v0.1.0 release published 13 Sep 2026, and a self-certified OpenSSF Best Practices Silver badge ([project 14613](https://www.bestpractices.dev/projects/14613)). [Read the source on GitHub](https://github.com/thearchitect0x-glitch/crimp). #### Why seal the rule before the outcome is known? So nobody can tune the rule after seeing which way it goes. A sealed rule can be re-run against the sealed facts years later and give the identical answer, which makes every decision reproducible. #### What happens when a fact changes after a decision? The decision withdraws itself. Crimp re-evaluates the sealed rule against fresh facts; if it no longer holds, the seal lapses and the decision asks again. Nobody has to remember to go back. #### What does “unknown never seals” mean? “We don’t know” is not “no”. A missing fact leaves the decision open; it never quietly collapses into a denial, or into an approval. [Field Note 02](https://www.deimoscore.com/field-notes/unknown-never-seals/) explains why. #### Can a hijacked AI agent fake a decision? It can propose a bad rule, and a bad rule is visible, reviewable and reproducible in a way a bad conclusion never is. Crimp holds no credentials, has no outbound access and executes nothing: it reports what stands, and the caller decides what to do. #### Where is Crimp used? Decisions that change someone’s week: benefits, coverage, prior authorisation. Wherever an automated system says yes or no to a person, the answer should carry its rule, its facts, and a way to take it back the moment it stops being true. #### Is Crimp patented if it is open source? A US provisional patent has been filed, so it is patent pending. The code stays open under Apache-2.0. Accountable Unknown never seals ### Open the hatch. Read every line. Crimp is open source because a decision gate you can’t inspect is just another black box. [Read the source on GitHub ↗](https://github.com/thearchitect0x-glitch/crimp) Release card · Crimp / Accountable UTC --:--:-- Status · OPEN SOURCE Release · v0.1.0 · signedPublished 13 Sep 2026 Licence · Apache-2.0 OpenSSF · Silver, self-certified · project 14613 Patent · PATENT PENDING Never with a number. The code stays open. Rule · Unknown never seals. Source · [GitHub releases](https://github.com/thearchitect0x-glitch/crimp/releases) · as of 2026-10-18 --- # Marklode · Startup due diligence before the investor pitch URL: https://www.deimoscore.com/marklode/ Updated: 2026-10-20T05:49:07Z Status: LIVE Marklode · Recon Division II · Evidence ## Find out who else does this before the investor asks. Startup due diligence before the pitch: who else does it and who funded them, prior art, the three strongest attacks on your idea, and a verdict on what survives. 24 to 72 hours. Every source linked; every finding checked by a person. LIVE Turnaround · 24 to 72 hours 1 Sources · Every one linked Findings · Checked by a person 1 Source · [marklode.com](https://marklode.com) · as of 2026-10-18 [Open marklode.com ↗](https://marklode.com) [Read a sample report ↗](https://marklode.com/sample) [Is this MCP server real? Check one](https://www.deimoscore.com/marklode/#check) §01 / Core sample ### Four layers. One verdict. We drill through your market layer by layer, until we hit something solid. - - - - Sample report · EXAMPLE — not a real brief - Layer 01 · Landscape · Finding F-1.2 #### Who else is here. Two funded companies already sell this to the same buyer. Company A is venture-backed; Company B is bootstrapped and profitable. Neither serves practices under 20 seats. Sources · [1] Company A funding announcement · [2] Company B pricing page - Layer 02 · Prior art · Finding F-2.1 #### What’s already been claimed. A granted patent covers the matching step, not the scheduling step. A 2023 paper describes the same method in public. Don’t pitch the matching as new. Sources · [3] Patent record, claim 1 · [4] Conference paper, section 3 - Layer 03 · Hostile review · Attacks 1–3 #### The three strongest attacks. - 1. “An incumbent ships this as a feature.” Lands. - 2. “Buyers won’t switch mid-contract.” Partly lands. - 3. “The data isn’t available.” Does not land. Sources · [5] Incumbent changelog · [6] Buyer contract terms · [7] Public dataset - Layer 04 · Verdict · What survives #### What survives. The niche survives: small practices that neither company serves. The general pitch does not. Lead with the niche and name Company A before the investor does. Checked by a person Every finding above carries its link in the report [Read a real sample report on marklode.com](https://marklode.com/sample) §02 / How a report is made ### Machine speed. Human sign-off. 01 · Wide #### Hundreds of sources, read fast. AI research covers far more ground than a person can in a day. That’s what it’s for. 02 · Checked #### A person checks every finding. Nothing reaches your report on a model’s word alone. Each finding carries a link to where it came from. 03 · Discreet #### Public sources only. NDA on request. Your brief is deleted on request. 04 · Honest #### Know before you spend, not after. Not legal, patent or investment advice. A clear read on the ground before you pay for any of those. §03 / The census ### We counted the public MCP registry. Marklode keeps a monthly census of the public MCP registry: every listing, deduplicated into the servers behind it. A free verify API gives an existence check and a transparent 0–100 score made of fixed, published rules. Registry entries 156,111 2 Servers behind them 45,156 2 With no public repo 13,383 (29.6%) 2 2 Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 VERIFIED One dot = 100 servers · 452 dots Public repo No public repo · 134 dots Sorted for reading: servers with a public repo first, then those without. Rounded to the nearest 100. [Census API · api.marklode.com/v1/stats ↗](https://api.marklode.com/v1/stats) Plate ML-01. The census as a core sample: one layer per month the registry first listed each server, oldest first (at the left; on a phone, at the bottom), widths to scale. Hatched: no public repository. Total 45,156; 13,383 (29.6%) with no public repo. Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 Metadata only; no server was contacted. §04 · Verify LIVE Answers from Marklode’s production API Its verify endpoint, which reads Marklode’s index of the official MCP registry: api.marklode.com/v1/verify Nothing leaves this page while you type. One request, when you press Check. [Privacy, clause 05](https://www.deimoscore.com/privacy/#p5) §04 / Check a server ### Is this MCP server real? Type a server’s registry name. Marklode looks it up in its index of the official MCP registry and answers from the listing: whether it’s there, who published it, whether it lists a source repository, and a 0–100 score built from those facts. Real, here, means listed; it isn’t a verdict on the code. The checker needs JavaScript. Without it, ask Marklode’s API yourself: [api.marklode.com/v1/verify?server=io.github.github/github-mcp-server ↗](https://api.marklode.com/v1/verify?server=io.github.github%2Fgithub-mcp-server), with the name you want after server=. Marklode Verify · Answer sheet · blank Fills in when Marklode answers No server checked yet #### The answer is filed here. Press Check and Marklode’s answer fills this sheet: whether the server is listed, its score and every field the registry listing holds. Until then, nothing has been asked. Fills in The score, publisher, title, status, versions, dates, source repo, host and the API’s reasons. A score describes registry metadata only. It is not a security audit. Method · in the API’s own words Metadata only: built from the public MCP registry API. No MCP server is ever contacted, probed or pinged, at index build time or per request. Source · [api.marklode.com/v1/stats ↗](https://api.marklode.com/v1/stats), field method · saved copy [/data/marklode-stats.json](https://www.deimoscore.com/data/marklode-stats.json) · fetched 2026-10-20 03:16 UTC A listing is metadata. Due diligence is everything else. The checker reads one registry record. A Marklode brief reads the ground around it: who else does it and who funded them, prior art, the three strongest attacks, and a verdict a person signed. [Brief Marklode for due diligence (opens marklode.com in a new tab)](https://marklode.com) §05 / The Line ### What it does. What it never claims. #### What it does - Maps who else does it, and who funded them. - Finds prior art: patents, papers and products that got there first. - Argues the three strongest attacks on your idea. - Gives a verdict on what survives, in 24 to 72 hours. - Counts the public MCP registry from listing metadata. - Checks one server’s registry listing, live, when you ask. #### What it never claims - It is not legal, patent or investment advice. - It does not use non-public sources. - No finding reaches you on a model’s word alone. - It never contacts, probes or pings an MCP server. - A verify score is not a security audit. [Flight Rule plate · FR-3 This instrument answers to FR-3: If it matters, make it provable. Every finding carries its source. Every census figure carries its date. Read the flight rules →](https://www.deimoscore.com/#flight-rules) §06 / Evidence ### On the record. - LIVE Marklode is live and taking briefs at [marklode.com](https://marklode.com). Source · [marklode.com](https://marklode.com) · as of 2026-10-18 - VERIFIED Turnaround: 24 to 72 hours. Source · [marklode.com](https://marklode.com) · as of 2026-10-18 - VERIFIED 156,111 public MCP registry entries counted. Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 - VERIFIED 45,156 distinct servers behind them, after deduplication. Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 - VERIFIED 13,383 servers (29.6%) with no public source repository. Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 - LIVE The verify API answers live at [api.marklode.com](https://api.marklode.com/v1/stats); [§04](https://www.deimoscore.com/marklode/#check) asks it only when you press Check. Source · [/data/marklode-stats.json](https://www.deimoscore.com/data/marklode-stats.json), saved from api.marklode.com/v1/stats · fetched 2026-10-20 03:16 UTC - VERIFIED A sample report, in full, before you brief us. Source · [marklode.com/sample](https://marklode.com/sample) · as of 2026-10-18 Briefing / Q&A ### Briefing: common questions #### What is startup due diligence before you raise? It is finding out who else does this before the investor asks. Marklode drills through your market in four layers and hands back a verdict in 24 to 72 hours, with every source linked and every finding checked by a person. #### What is in a Marklode report? Four layers. Landscape: competitors, adjacent players and who funded them. Prior art: patents, papers and products that got there first. Hostile review: the three strongest attacks on your idea. Verdict: what survives. See a [sample report](https://marklode.com/sample). #### How is Marklode different from asking an AI model? A model gives you a list; Marklode gives you a verdict. AI research covers hundreds of sources fast, then a person checks every finding, and nothing reaches your report on a model’s word alone. #### What if my idea is already taken? The report will say so plainly, and it will show the narrower part that isn’t taken, which is often the part worth building. #### Is Marklode legal or patent advice? No. It is not legal, patent or investment advice, and it is not a freedom-to-operate opinion. It is a clear read on the ground before you pay for any of those. #### What do I send, and is it confidential? Two to five sentences: the idea, the customer, today’s alternatives, competitors you know, and whether you plan to raise, file or build. No deck needed. Public sources only, NDA on request, and your brief is deleted on request. #### How many MCP servers are there? Marklode’s October 2026 recount of the public MCP registry found 156,111 registry entries, which deduplicate to 45,156 distinct servers. 13,383 of them (29.6%) have no public source repository. The first census, on 2026-09-12, found 31,309. [Field Note 03](https://www.deimoscore.com/field-notes/mcp-servers-census/) covers what the count does and doesn’t tell you. #### What is the Marklode MCP registry census? A monthly count of the public MCP registry: every listing, deduplicated into the servers behind it. Metadata only; no MCP server is ever contacted, probed or pinged. Live totals are at [api.marklode.com](https://api.marklode.com/v1/stats). Recon Before the pitch. Before the attorney. ### Send us the idea. Get back the ground truth. Public sources only. NDA on request. Your brief is deleted on request. [Brief Marklode · marklode.com ↗](https://marklode.com) [Sample report ↗](https://marklode.com/sample) · [Census API ↗](https://api.marklode.com/v1/stats) Brief card · Marklode / Recon UTC --:--:-- - LandscapeWho else is here. - Prior artWhat’s already been claimed. - Hostile reviewThe three strongest attacks. - VerdictWhat survives, checked by a person. Status · LIVE Turnaround · 24 to 72 hours Sources · Public only · every one linked Not · Legal, patent or investment advice Source · [marklode.com](https://marklode.com) · as of 2026-10-18 --- # M.A.X · Behavioral video analysis for litigation, in the lab URL: https://www.deimoscore.com/max/ Updated: 2026-10-19T22:36:22Z Status: IN THE LAB M.A.X · Baseline Division II · Evidence ## Every person, measured against their own baseline. Offline-first analysis of video you already have. M.A.X measures each person against their own baseline and shows where their story changes. It does not detect deception. It shows you where to look. IN THE LAB Runs offline For litigation teams [See the six channels →](https://www.deimoscore.com/max/#channels) [What it never claims](https://www.deimoscore.com/max/#line) EXAMPLE — synthetic data §01 / Six channels, one timeline ### Six channels. One timeline. - 01 #### Baseline first. The opening minutes set what normal looks like for this person. Not for people in general: for them. - 02 #### Six channels, one timeline. Face, eyes, voice, speech, body and pulse, each read against its own band. - 03 #### Changes that line up get flagged. One channel moving means little. Several moving together at the same moment is worth a look. - 04 #### A person decides what it means. M.A.X does not detect deception. It marks the moment; your team reviews the tape. ILLUSTRATIVE · SYNTHETIC SIGNALS · NOT A REAL PERSON EXAMPLE — synthetic data Timecode 00:20:00 Reviewer’s note · Example A person decides what it means. §02 / Air gap ### Nothing leaves the machine. Discovery is privileged. M.A.X runs on your own hardware, offline, and the evidence stays where you put it. Your machine M.A.X No uplink Cloud §03 / The Line ### What it does. What it never claims. #### What it does - Measures each person against their own baseline across face, eyes, voice, speech, body and pulse. - Flags where the story changes. - Runs offline on your own hardware. #### What it never claims - It does not detect deception. - It does not score or rank people. - It does not decide what a change means. A person does. - It does not compare anyone against a stereotype of how people behave. [Flight Rule plate · FR-1 This instrument answers to FR-1: People stay in charge of what matters. M.A.X marks the moment. A person decides what it means. Read the flight rules →](https://www.deimoscore.com/#flight-rules) §04 / Evidence ### On the record. - IN THE LAB Packaged, not released. Source · Deimos AI LLC · as of 2026-10-18 - IN THE LAB Reads six channels on one timeline: face, eyes, voice, speech, body and pulse. Source · M.A.X design lines · as of 2026-10-18 - IN THE LAB Runs offline, on your own hardware. Video you already have; nothing is uploaded. Source · M.A.X design lines · as of 2026-10-18 - IN THE LAB No accuracy figures are published. M.A.X makes no performance claim while it is in the lab. Source · this page · as of 2026-10-18 Built for plaintiff-side litigation teams and fraud-investigation teams preparing depositions and reviewing testimony. Briefing / Q&A ### Briefing: common questions #### What is M.A.X? M.A.X (Multimodal Analytical eXpert) is offline-first analysis of video you already have, built for litigation teams. It measures each person against their own baseline and shows where their story changes. #### Does M.A.X detect deception? No. M.A.X does not detect deception. It flags where behaviour changes against that person’s own baseline and shows you where to look. A trained person decides what any change means. [Field Note 04](https://www.deimoscore.com/field-notes/why-max-does-not-detect-deception/) explains the choice. #### What does measuring against a person’s own baseline mean? The opening minutes set what normal looks like for this person: not for people in general, for them. Change is measured against how this person behaves, never against a stereotype of how people behave. #### Which signals does M.A.X read? M.A.X reads six channels: face, eyes, voice, speech, body and pulse, together on one timeline from video you already have. #### Does deposition video leave my machine? No. Discovery is privileged, so M.A.X runs on your own hardware, offline, and the evidence stays where you put it. #### Who is M.A.X for? Case teams: plaintiff-side boutiques and fraud-investigation teams preparing depositions and reviewing testimony. #### Can I use M.A.X today? Not yet. M.A.X is in the lab; it handles evidence that can decide a case, so it ships when it is ready and not before. Follow [Deimos AI on LinkedIn](https://www.linkedin.com/company/deimoshq/) for the release. Baseline In the lab ### Built quietly. Released carefully. M.A.X handles evidence that can decide a case, so it ships when it’s ready and not before. [Follow the build on LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) Bench card · M.A.X / Baseline UTC --:--:-- Status · IN THE LAB Channels · six Face, eyes, voice, speech, body, pulse Runs · Offline, on your own hardware Uplink · None. Nothing is uploaded. Scores · None. It marks the moment; a person decides. Accuracy · No figures published while in the lab Source · M.A.X design lines · as of 2026-10-18 --- # Vessel · Public-source early warning, reviewed by people URL: https://www.deimoscore.com/vessel/ Updated: 2026-10-19T22:36:22Z Status: IN THE LAB Project Vessel · Lookout Division II · Evidence ## Early warning from the open web. A person decides. Vessel is built to read public discussion on open forums and flag conversations that are escalating toward harm. Every flag goes to a human reviewer with a written brief and a link to every source post. It does not identify people, score people or predict what anyone will do. IN THE LAB NOT YET VALIDATED Sources · Public posts only Runs · Locally Retention · thirty days by default [How a flag is made →](https://www.deimoscore.com/vessel/#desk) [Read the safeguards](https://www.deimoscore.com/vessel/#safeguards) §01 / What it reads ### Only what people chose to post in public. #### Built to read - Open, public forums such as Mastodon, Lemmy and Discourse #### Never reads - Private groups - Encrypted channels - Direct messages §02 / The Review Desk ### How a flag is made. SYNTHETIC EXAMPLE · NO REAL POSTS OR PEOPLE EXAMPLE — synthetic thread, no real people forum.example.org · thread 4471 · invented - Participant A · post 1 · +0 h Anyone else see the decision about the Saturday stalls? Feels unfair. forum.example.org/t/4471/1 - Participant B · post 2 · +2 h It was voted on. You can raise it at the next meeting. forum.example.org/t/4471/2 - Participant A · post 3 · +5 h Nobody listens at meetings. Same people every time. forum.example.org/t/4471/3 - Participant C · post 4 · +9 h Then maybe it’s time somebody made them listen. forum.example.org/t/4471/4 - Participant A · post 5 · +14 h It’s always them, the ones from that background, who get their way. forum.example.org/t/4471/5 - Participant B · post 6 · +16 h Calm down. It’s a market stall. forum.example.org/t/4471/6 - Participant C · post 7 · +22 h They only listen when people stop being polite. forum.example.org/t/4471/7 - Participant A · post 8 · +27 h Then we stop being polite. forum.example.org/t/4471/8 - Participant C · post 9 · +31 h They won’t ignore us after this. forum.example.org/t/4471/9 PROTECTED ATTRIBUTE · NOT EVIDENCE Routed out of the assessment Brief · forum.example.org/t/4471 · Example only PRIORITY · PLAUSIBLE CONCERN Thread on forum.example.org, 9 posts over 31 hours. Language escalates from post 4. Sources: [[1]](https://www.deimoscore.com/vessel/#posts) – [[9]](https://www.deimoscore.com/vessel/#posts). - [1] …/4471/1 - [2] …/4471/2 - [3] …/4471/3 - [4] …/4471/4 - [5] …/4471/5 - [6] …/4471/6 - [7] …/4471/7 - [8] …/4471/8 - [9] …/4471/9 For human review Decision With the reviewer. Vessel does not decide. forum.example.net/t/0219 · Example NOT ASSESSED Language · Outside what Vessel reads reliably Priority · Not raised Goes to · A person, marked not assessed - 01 #### Public posts, with their links. Every post Vessel reads keeps its permalink, so a reviewer can open the original. - 02 #### A person’s characteristics are never evidence. Wording about who someone is gets marked and routed out of the assessment. - 03 #### Conversations, not people. One line for the thread. No line for any participant, and no score on anyone. - 04 #### A brief, with every source. The reviewer gets a written brief they can check line by line against the posts. - 05 #### When it can’t tell, it says so. Vessel says ‘not assessed’ instead of a false all-clear. Content it can’t read reliably never raises the top priority. §03 / Safeguards ### The safeguards are the product. Document V-0 · Safeguards · Rev A #### What Vessel will not do, by design. Released 2026-10-18 - V-1 Public data only. No private groups, encrypted channels or direct messages. - V-2 A protected-attributes firewall: a person’s characteristics are never evidence. - V-3 No profiling of individuals, no geolocation, no scoring of people. - V-4 Every flag goes to a person, with a written brief and a permalink to every source post. - V-5 NOT ASSESSED instead of a false all-clear. - V-6 Content in a language Vessel can’t read reliably never raises the top priority; it goes to a person, marked not assessed. - V-7 Thirty-day retention by default. Runs locally. §04 · On the record IN THE LAB Vessel’s thresholds are reasoned, not yet measured. It has not been tested against adjudicated cases. We will say so until that changes. UNPROVEN Source · Vessel user manual §8 · as of 2026-10-18 §04 / The Line ### What it does. What it never claims. #### What it does - Reads public discussion on open forums. - Built to flag conversations escalating toward harm. - Writes a brief a person can check line by line. - Says when it can’t tell. #### What it never claims - It does not predict violence. - It does not identify threats or individuals. - It does not profile, locate or score people. - It does not read private or encrypted spaces. - It does not replace a reviewer’s judgment. [Flight Rule plate Vessel answers to FR-1: People stay in charge of what matters, and FR-4: Bend, don’t break. Read the flight rules →](https://www.deimoscore.com/#flight-rules) Briefing / Q&A ### Briefing: common questions #### What is Project Vessel? Public-source early warning, reviewed by people. Vessel surfaces public posts on open forums where a conversation is escalating toward harm, so a person can review them. Every flag goes to a reviewer with a written brief and a permalink to every source post. #### Is Vessel surveillance? Not of people. Vessel reads only what people chose to post in public, on open forums, and it flags conversations, not people: it builds no profiles, uses no location and scores no one. Private groups and direct messages are never read, and a person reviews every flag. #### How does Vessel keep a person’s characteristics out of a flag? With a protected-attributes firewall. A person’s characteristics are never evidence: wording that describes who someone is gets routed out of the assessment before anything is flagged. #### What happens when Vessel can’t tell? It says NOT ASSESSED instead of giving a false all-clear. Content it can’t read reliably never raises the top priority; it goes to a person marked as not assessed. #### What data does Vessel keep? Only what it read from public sources, for thirty days by default, and it runs locally on the reviewer’s machine. It doesn’t read private or encrypted groups, and it keeps no profile of any person. #### Is Vessel open-source intelligence (OSINT) for online harm? In the plain sense of the term, yes: it works only from public sources, it looks for conversations heading toward harm, and a person reviews every flag and makes every decision. #### Has Vessel been validated? Not yet, and we say so on the record. Thresholds reasoned, not yet measured; not yet tested against adjudicated cases. That line stays until it changes. #### Can I use Vessel today? Not yet. Vessel is in the lab. Trust and safety teams and researchers can follow the work on [LinkedIn](https://www.linkedin.com/company/deimoshq/). Lookout In the lab ### Vessel is in the lab. Trust and safety teams and researchers can follow the work. [Follow the build ↗](https://www.linkedin.com/company/deimoshq/) Bench card · Vessel / Lookout UTC --:--:-- Status · IN THE LAB NOT YET VALIDATED Sources · Public posts only Never reads · Private groups · encrypted channels · direct messages Runs · Locally Retention · thirty days by default Decision · With the reviewer. Vessel does not decide. Source · Vessel retention setting (30-day default) and README scope · as of 2026-10-18 --- # Pastel Series · Re-reading the Rainbow Series for AI agents URL: https://www.deimoscore.com/pastel/ Updated: 2026-10-19T22:36:22Z Status: RESEARCH The Pastel Series · Criteria Division III · Research ## Re-reading the Rainbow Series for a world with agents inside. In the 1980s, a set of US computer-security guidelines came to be known by the colours of their covers: the Rainbow Series. The Pastel Series is our research revisiting those criteria for a world where the actor may be a person or an AI agent that is already inside. It is unpublished and in progress. Not affiliated with or endorsed by the National Security Agency or any government body. RESEARCH UNPUBLISHED NO RELEASE DATE [See the colour shift →](https://www.deimoscore.com/pastel/#shift) [What we can say](https://www.deimoscore.com/pastel/#line) §01 / The colour shift ### The colour shift The old criteria were written for machines and the people cleared to use them. FR-2 Assume something is already inside. The Pastel Series · Working draft · Not for citation UNPUBLISHED Content withheld until the research can stand on its own. §02 / Why revisit ### The actor changed. The questions didn’t. For most of computing’s history, the actor a security model worried about was a person: an outsider trying to get in, or an insider cleared to be there. Today the actor that matters most may be an AI agent acting with legitimate credentials, already inside, doing exactly what its permissions allow. The questions the old criteria asked are still the right ones: who may act, on what, and how anyone can tell afterwards. The setting around them has changed. Criteria written for a different era deserve a careful re-reading, not a rewrite from memory. That is the work. It starts from our second flight rule, [assume something is already inside](https://www.deimoscore.com/#flight-rules), and how we hold ourselves to it is on the [Security](https://www.deimoscore.com/security/) page. §03 / The Line ### What we can say. What we can’t yet. #### What we can say - It is research in progress. - It revisits the Rainbow Series criteria. - It assumes the actor may be a person or an AI agent already inside. #### What we can’t say yet Methods · WITHHELD Scope · WITHHELD Release date · WITHHELD #### What it never claims - It is not affiliated with or endorsed by the National Security Agency or any government body. - It is not published, and it is not for citation. - It does not certify, rate or approve any system. - It gives no count of volumes or criteria. [Flight Rule plate The Pastel Series answers to FR-2: Assume something is already inside. Read the flight rules →](https://www.deimoscore.com/#flight-rules) Briefing / Q&A ### Briefing: common questions #### What is the Pastel Series? Our research revisiting the Rainbow Series security criteria for a world where the actor may be a person or an AI agent that is already inside. It is unpublished and in progress. #### What was the Rainbow Series? In the 1980s, a set of US computer-security guidelines came to be known by the colours of their covers: the Rainbow Series. The old criteria were written for machines and the people cleared to use them. #### Why revisit the Rainbow Series now? Because the actor who matters most may now be an AI agent acting with legitimate credentials, already inside. Criteria written for a different era deserve a careful re-reading. It starts from our second flight rule: assume something is already inside. #### What does “already inside” mean? An actor with legitimate access: a person with a valid login, or an AI agent that was handed credentials so it could do its job. Our second Flight Rule asks every system to assume one is already there. [Field Note 05](https://www.deimoscore.com/field-notes/assume-something-is-already-inside/) explains the rule. #### Is the Pastel Series affiliated with the NSA? No. The Pastel Series is not affiliated with or endorsed by the National Security Agency or any government body. #### Can I read a draft of the Pastel Series? Not yet. It is a working draft, unpublished and not for citation. When part of it is released, the release is dated and logged in [the Record](https://www.deimoscore.com/record/). #### When will the Pastel Series be published? It has no release date. Its methods and scope are withheld until the research is ready. Follow [Deimos AI on LinkedIn](https://www.linkedin.com/company/deimoshq/) for news. Criteria Research ### Follow the research. The Pastel Series is unpublished. Nothing is released before it can stand on its own. [LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) [Field Notes →](https://www.deimoscore.com/field-notes/) Draft card · Pastel / Criteria UTC --:--:-- Status · RESEARCH UNPUBLISHED Revisits · The Rainbow Series criteria Assumes · The actor may be a person or an AI agent already inside Methods · WITHHELD Release · NO RELEASE DATE Answers to · FR-2 · Assume something is already inside Not affiliated with or endorsed by the National Security Agency or any government body. --- # NeuroPhonics · Signal-processing simulation (research only) URL: https://www.deimoscore.com/neurophonics/ Updated: 2026-10-19T22:36:22Z Status: SIMULATION Division III · Research · RESONANCE ## Find a faint resonance in noise. Refuse when you can’t. Module 1 is a signal-processing simulation. It plants a resonance in synthetic noise and recovers it with bandpass filtering, FFT, STFT and matched-FM tracking. A separate chirp run checks its calibration maths. A self-check gate refuses to report when the model doesn’t fit or the signal-to-noise ratio is too low. SIMULATION RESEARCH ONLY SYNTHETIC SIGNALS DIVISION III Planted 245 Hz 1 Recovered 246.219 Hz 1 Refuses below −3.0 dB coherent SNR2 1 Module 1 static demo, seed 42 · [/data/neurophonics.json](https://www.deimoscore.com/data/neurophonics.json) · spectrum 2 Module 1 gate configuration · gate.thresholds [Watch it refuse ↓](https://www.deimoscore.com/neurophonics/#waterfall) [Follow the research ↗](https://www.linkedin.com/company/deimoshq/) Notice · Simulation · Research only Simulation · research only. NeuroPhonics Module 1 runs on synthetic signals. It is not a medical device, it makes no medical claim, and it does not measure anything about a person. §01 / The Waterfall ### Six steps, from noise to where it breaks. Read this first · The loop is circular The simulation plants the signal it then finds. The script plants the tone and then recovers it. Recovery validates the filters, not any real-world claim. That honesty is the point: an instrument that can’t find a resonance we put there ourselves has no business reporting anything else. In this run, Module 1 planted a 245 Hz tone and its static FFT found the peak at 246.219 Hz. The matched-FM tracker fitted 213.800 Hz to a resonance planted at 213.8 Hz, with a mean error of 0.013 Hz. The self-check gate refused on two of three segments of a constructed record (MODEL_MISMATCH below fit quality 0.70, CRITICAL_LOW_SNR below −3.0 dB coherent SNR). Against the simulation’s own 4.8 Hz pass/fail line, the static FFT, STFT and matched-FM estimators break down below −22.5, −17.5 and −22.5 dB SNR. - - - - - - - Step 1 · Raw input #### Noise. Synthetic input: a periodic 1.2 Hz modulation, a narrowband tone and broadband noise. The tone is planted at 245 Hz, and you can’t see it. We know the answer because we put it there. That is how you test an instrument honestly. PLANTED · KNOWN ANSWER · 245 Hz - Step 2 · Bandpass #### Narrow the band. An adaptive Butterworth bandpass, zero-phase, keeps 228.2 –264.2 Hz and drops everything else. What was buried is a clean oscillation, about a quarter the height of the noise that hid it. PASS BAND · 228.2 –264.2 Hz - Step 3 · Spectrum #### Find the peak. A Hann-windowed FFT, raw against bandpassed. The cleaned trace has one peak, at 246.219 Hz: 1.219 Hz above the planted 245 Hz. The record carries a 1.2 Hz modulation, and a static FFT locks onto its first sideband instead of the carrier. We print the error rather than round it away. RECOVERED · 246.219 Hz - Step 4 · Spectrogram #### Track it. A second record, with a resonance planted at 213.8 Hz that swings ±2 Hz at 1.2 Hz. The STFT waterfall rolls in, time running down. Dashed: what we planted. Solid: the matched-FM fit, centre 213.800 Hz, mean error 0.013 Hz. The plain STFT peak tracker’s median error is 0.261 Hz. MATCHED-FM · 213.800 Hz · MEAN ERROR 0.013 Hz - Step 5 · Self-check gate #### Refuse. Every window, the gate asks whether the locked model still explains the signal. Coherent SNR under −3.0 dB: CRITICAL_LOW_SNR. Fit quality under 0.70: MODEL_MISMATCH. The record is constructed from the module’s own generators: a matched segment, a wrong modulation rate, then a signal buried in noise. Below this line, Module 1 doesn’t guess. It refuses. REFUSED · MODEL_MISMATCH · CRITICAL_LOW_SNR - Step 6 · SNR sweep #### Where each method breaks. 100 runs at each of 15 SNR levels, +10 to −25 dB. The dashed line at 4.8 Hz is the simulation’s own pass/fail line on mean error, not an accuracy figure. The static FFT holds to −22.5 dB, the STFT tracker to −17.5 dB, the matched-FM tracker to −22.5 dB. Past that, each would be guessing. BREAKDOWN · −22.5 / −17.5 / −22.5 dB Document NP-1 · Module 1 run record · Rev A · 2026-10-18 §02 / The run, on the record ### Every number here came out of the module. 246.219 Hz, the static FFT’s peak for a tone planted at 245 Hz. Off by 1.219 Hz, and we say so. neurophonics.json · spectrum.recoveredPeakHz 0.013 Hz mean error of the matched-FM tracker against the planted path. neurophonics.json · track.matchedFm 4.8 Hz: the simulation’s own pass/fail line on mean error. Not an accuracy figure. neurophonics.json · sweep.errorThresholdHz 6 Gate scenarios run. The gate refused on 4 of them. neurophonics.json · gate.scenarios SIMULATION · synthetic signals only FIGURE 7 · CALIBRATION CHIRP · MODULE 1 · 50 –500 Hz · SEED 3 · 2026-10-18 · SYNTHETIC Recovered peak 212 Hz against a model resonance of 213.8 Hz; median relative error 0.36 %, worst 2.85 %. The response is synthesised from the same assumed resonator model, so this checks the system-identification maths only. Table 1 · Self-check gate · six scenarios · synthetic Scenario · Fit quality · Coherent SNR · Gate · Matched model, noise σ 1.0 · 0.915 · 9.65 dB · OK · Matched model, noise σ 3.0 · 0.962 · 0.89 dB · OK · Matched model, noise σ 30 (signal buried) · 0.535 · −10.55 dB · CRITICAL_LOW_SNR · Wrong modulation rate (1.9 Hz instead of 1.2 Hz) · 0.570 · 10.77 dB · MODEL_MISMATCH · Wrong modulation rate (2.3 Hz instead of 1.2 Hz) · 0.661 · 11.88 dB · MODEL_MISMATCH · Linear frequency drift (non-sinusoidal) · 0.135 · −2.75 dB · MODEL_MISMATCH · Rules, in order: CRITICAL_LOW_SNR if coherent SNR < −3.0 dB (checked first); MODEL_MISMATCH if fit quality < 0.70; OK otherwise. Fit quality is the achieved model coherence over the coherence achievable at the measured noise level. Exported · 2026-10-18 20:01 UTC Sample rate · 2000 Hz Libraries · numpy 2.5.0 · scipy 1.18.0 Module source sha256 · 1efdd76aa1d7c075270eed53f92839a2c0a9d98b62ef5b268358452473af8b7f This file's sha256 · computed in your browser when scripts run Scenarios · raw/clean/spectrum reproduce the module’s static demo (8 s, seed 42, last case); spectrogram/track reproduce its tracking demo (seed 7, noise σ 1.0); gate, sweep and chirp reproduce their own demos. Each section lists its planted frequency. Plate NP-01 · Simulation · synthetic signals. Module 1’s own STFT drawn as an engraved ridgeline: the planted centre (213.8 Hz) dashed, the matched-FM track one dot per slice (mean error 0.013 Hz). Source · [NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…](https://www.deimoscore.com/data/neurophonics.json) · as of 2026-10-18 The script plants the tone and then recovers it; recovery validates the filters, not any real-world claim. §03 / Why a refusal is a feature ### A refusal is a result. An instrument built to always produce a number is the dangerous kind. A reading taken from a model that no longer fits, or from a signal the noise has swallowed, looks exactly like a good one on a screen. Module 1 checks itself before it speaks. If the coherent SNR falls under its floor, or the fit stops explaining the signal, it returns a named code instead of a frequency. That code is a result: it marks where the method ends, which is the one thing a guess can never tell you. An instrument that says nothing when it can’t be sure is more useful than one that always answers. [Flight Rule plate · Document FR-4 This instrument answers to FR-4: Bend, don’t break. Refuse rather than guess. When we don’t know, we say so. Unknown never quietly becomes yes, and never quietly becomes no. Read the flight rules](https://www.deimoscore.com/#flight-rules) §04 / The Line ### What it does. What it never claims. #### What it does - Plants a known resonance in synthetic noise, then recovers it. - Checks its calibration maths with a separate 50 –500 Hz chirp run. - Narrows the band, finds the peak with an FFT, and tracks it with STFT and matched-FM. - Refuses, with a named code, when the model doesn’t fit or the SNR is too low. - Publishes its own errors, including the 1.219 Hz its static FFT gets wrong. #### What it never claims - It is not a medical device. - It does not measure or estimate anything about a person. - It has no medical or regulatory status. - It never runs on recordings: every signal is synthetic. - Finding a tone it planted checks the filters; it supports no real-world claim. - The 4.8 Hz line is the simulation’s own pass/fail line, not its accuracy. Briefing / Q&A ### Briefing: common questions #### What is NeuroPhonics Module 1? A signal-processing simulation. It plants a resonance in synthetic noise and recovers it with bandpass filtering, FFT, STFT and matched-FM tracking. A separate chirp run checks its calibration maths. #### Does NeuroPhonics use real data or measure anything about a person? No. Module 1 runs on synthetic signals only. It does not measure or estimate anything about a person. #### Is NeuroPhonics a medical device? No. It is not a medical device, it makes no medical claim, and it has no medical or regulatory status. It is a simulation for research only. #### Why does Module 1 refuse to report? A self-check gate refuses to report when the model doesn’t fit or the signal-to-noise ratio is too low. An instrument that says nothing when it can’t be sure is more useful than one that always answers. That is our fourth flight rule: bend, don’t break. #### Why plant a known answer in the noise? We know the answer because we put it there. That is how you test an instrument honestly: if it can’t recover a resonance we planted ourselves, it has no business reporting anything else. #### What is matched-FM tracking? A tracker that fits a model of a frequency-modulated tone (its centre, depth and phase) to the signal. In Module 1’s synthetic run the planted centre was 213.8 Hz; the matched-FM fit found 213.800 Hz, with a mean error of 0.013 Hz. #### When does the self-check gate refuse? When the coherent signal-to-noise ratio is below −3.0 dB, or when the model’s fit quality is below 0.70. Both thresholds come from the module’s own configuration and apply to synthetic signals only. #### Can I use NeuroPhonics? Not as a tool. Module 1 is research only, and it stays a simulation. Follow the research on [LinkedIn](https://www.linkedin.com/company/deimoshq/). Research only · RESONANCE ### Follow the research. Module 1 is a simulation, and it stays one. Updates on the research, including the runs where it refuses, go out on LinkedIn. [Follow the research ↗](https://www.linkedin.com/company/deimoshq/) Run card · Module 1 / Resonance UTC --:--:-- Status · SIMULATION RESEARCH ONLY Planted · 213.8 Hz Known answer: we put it there Matched-FM · 213.800 Hz Mean error 0.013 Hz Refuses · Coherent SNR under −3.0 dB or fit quality under 0.70 A person · Measures nothing about one Source · [NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…](https://www.deimoscore.com/data/neurophonics.json) · as of 2026-10-18 --- # The Lab · Research, measured before it’s claimed · Deimos AI URL: https://www.deimoscore.com/lab/ Updated: 2026-10-19T22:36:22Z Status: SEALED The Lab · Sealed Division III · Research ## Measured before it’s claimed. The Lab is where Deimos AI LLC works on things that aren’t ready to stand on their own. When one is ready, its file is released to its own page, with the date. Until then, it stays sealed. SEALED Files · 07 Released · 03 Sealed · 04 [Open the drawer →](https://www.deimoscore.com/lab/#the-drawer) [Read the lab rules](https://www.deimoscore.com/lab/#rules) §01 / The drawer ### Three released. Four sealed. Released files link to their own page. Sealed files are never named and never say how they work. At most, one shows its domain. - File 01 Released 2026-10-18 #### Vessel Status · IN THE LAB Now · Public-source early warning, reviewed by people. [→ Division II · /vessel/](https://www.deimoscore.com/vessel/) - File 02 Sealed #### CODENAME WITHHELD Domain · Status · Built · not released Rule · Protected before it’s public Sealed · not named - File 03 Sealed #### CODENAME WITHHELD Domain · Status · Paper study Rule · Measured before it’s claimed Sealed · not named - File 04 Sealed #### CODENAME WITHHELD Domain · Status · Working prototype Rule · Runs offline first Sealed · not named - File 05 Released 2026-10-18 #### NeuroPhonics Status · SIMULATION Now · Module 1: a signal-processing simulation on synthetic signals. [→ Division III · /neurophonics/](https://www.deimoscore.com/neurophonics/) - File 06 Released 2026-10-18 #### Pastel Series Status · RESEARCH Now · Classic security criteria, revisited. Unpublished research. [→ Division III · /pastel/](https://www.deimoscore.com/pastel/) - File 07 Sealed #### CODENAME WITHHELD Domain · Airspace Status · Paper study Rule · A person decides Idea · A brain for the sky, not a weapon. [↓ What it’s about](https://www.deimoscore.com/lab/#airspace) Sealed · not named · methods withheld Document L-0 · Lab rules · Rev A ### How a file leaves the drawer. - L-1 #### It passes its own tests first. Nothing ships on a claim we haven’t measured. If the number isn’t in, the claim isn’t either. - L-2 #### It’s protected before it’s public. Ideas get their filings before they get their spotlight. - L-3 #### Defence only. We build shields, not weapons. No exceptions for a good pitch. - L-4 #### If it touches people, people review it. No system in the Lab gets the last word about a human being. §03 / The Line ### What it does. What it never claims. #### What the Lab does - Holds work that isn’t ready to stand on its own. - Releases a file to its own page, with the date. - Keeps a sealed file sealed until it meets the lab rules. #### What it never claims - That a sealed file works. - A release date for a sealed file. - Anything about how a sealed file works, or what it is called. - Anything but defence. §04 / Evidence ### The release register. - IN THE LAB File 01 released as [Project Vessel](https://www.deimoscore.com/vessel/), Division II · Evidence. Released 2026-10-18 · source · [/vessel/](https://www.deimoscore.com/vessel/) - SIMULATION File 05 released as [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/), Division III · Research. Released 2026-10-18 · source · [/neurophonics/](https://www.deimoscore.com/neurophonics/) - RESEARCH File 06 released as [The Pastel Series](https://www.deimoscore.com/pastel/), Division III · Research. Released 2026-10-18 · source · [/pastel/](https://www.deimoscore.com/pastel/) - SEALED Files 02, 03, 04 and 07 remain sealed and unnamed. As of 2026-10-18 · this page [Flight Rule plate · FR-3 The Lab answers to FR-3: If it matters, make it provable. A file is released when its claims can be checked, and not before. Read the flight rules →](https://www.deimoscore.com/#flight-rules) Briefing / Q&A ### Briefing: common questions #### What is the Deimos AI Lab? Division III · Research. The Lab is where Deimos AI LLC tests ideas before they are ready to stand on their own, under one rule: measured before it’s claimed. #### What has the Lab released? On 2026-10-18 three files left the drawer for their own pages: [Project Vessel](https://www.deimoscore.com/vessel/), public-source early warning reviewed by people; [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/), a signal-processing simulation for research only; and [the Pastel Series](https://www.deimoscore.com/pastel/), research revisiting the Rainbow Series criteria. #### What is still sealed? There are four sealed files. None is named, and none says how it works, until it is ready to stand on its own. One, File 07, shows only its domain, airspace, as an illustration. #### How does a file leave the Lab? It passes its own tests first. It is protected before it is public. It is defence only. And if it touches people, people review it: no system in the Lab gets the last word about a human being. #### Does Deimos AI build weapons? No. Defence only. We build shields, not weapons, with no exceptions for a good pitch. #### How will I know when a file is released? It gets a release stamp with the date, its own page, and an entry in the [Record changelog](https://www.deimoscore.com/record/#changelog). You can also follow Deimos AI on [LinkedIn](https://www.linkedin.com/company/deimoshq/). Sealed Division III · Research ### The next release gets its own page. Follow Deimos AI to hear when a file leaves the drawer. [Follow Deimos AI on LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) --- # Security posture · Assume something is already inside URL: https://www.deimoscore.com/security/ Updated: 2026-10-20T13:42:00Z Security posture · Deimos AI LLC ## Assume something is already inside. Security at Deimos AI LLC is a design rule, not a feature. Here is what you can check for yourself. §01 / Checkable now ### Don't trust us. Check us. E-01 VERIFIED Silver Ratchet: self-certified OpenSSF Best Practices badge, project 14440. Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14440) · as of 2026-10-20 E-02 VERIFIED Silver Crimp: self-certified OpenSSF Best Practices badge, project 14613. Source · [bestpractices.dev](https://www.bestpractices.dev/projects/14613) · as of 2026-10-20 E-03 OPEN SOURCE Apache-2.0 Ratchet and Crimp are published under the Apache License 2.0. Read every line. Source · [GitHub repository](https://github.com/thearchitect0x-glitch/ratchet) · as of 2026-10-18 E-04 VERIFIED v0.1.0 Crimp's first release is signed, so you can check it came from us and wasn't altered. Source · [GitHub releases](https://github.com/thearchitect0x-glitch/crimp/releases) · as of 2026-10-18 Verify it yourself · Crimp v0.1.0 · two commands, no key to import gh attestation verify crimp-v0.1.0.tar.gz --repo thearchitect0x-glitch/crimp sha256sum -c crimp-v0.1.0.tar.gz.sha256 The first checks the Sigstore attestation bound to the GitHub workflow run that built the archive; the second checks the archive byte for byte. Published digest: a76f21d53944…38a6. Full walk-through on [Crimp’s page](https://www.deimoscore.com/crimp/). Check a decision yourself · Crimp’s Determination Verifier · offline, in your browser [Open the verifier on Crimp’s page](https://www.deimoscore.com/crimp/#verify) Give it a Crimp determination and the values you hold: it recomputes the rule hash and every fact commitment and re-runs the sealed rule, with no account, no server and no network request. It holds no issuer keys, so it never checks a signature: “Verifies” means the record agrees with itself and with your values, not that Crimp issued it. This site serves Crimp’s own verifier code, unchanged (Apache-2.0). Plate SC-01. Assume something is already inside, drawn as a hull: each response header this site sends seals one compartment, so a breach stays where it started. The hull is a metaphor; the headers are the ones printed live below. Source · this site’s _headers file, read when the plate was drawn. §02 / This page, right now ### The headers this page was served with. Your browser just asked our server for this page again and printed what came back. Nothing here is typed by hand. Checked published policy without JavaScript Header · Value · In plain English · Sent by the server · Content-Security-Policy · default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob:; connect-src 'self' https://api.marklode.com/v1/verify; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests · Only our own code may run on this page. It may connect only to this site, and to Marklode’s checker after you press Check on [/marklode/](https://www.deimoscore.com/marklode/#check). · Published · Strict-Transport-Security · max-age=31536000 · Your browser will only ever talk to us over HTTPS. · Published · X-Frame-Options · DENY · No other site can wrap this page in a frame to trick you. · Published · Cross-Origin-Opener-Policy · same-origin · A window this page opens can’t reach back into it. · Published · Permissions-Policy · camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=() · This page can't ask for your camera, microphone, location or payment details. · Published · Referrer-Policy · strict-origin-when-cross-origin · Sites you click through to see where you came from, not what you were reading. · Published · X-Content-Type-Options · nosniff · Files are treated as exactly what they say they are. · Published · Without JavaScript you see the policy as published in our headers file. 0 Cookies set by this page. 0 Requests to anyone but us. §03 / How we work ### Outcomes, not methods. 01 · Independent review #### A second pair of eyes. Defence code is reviewed by someone who didn't write it before it ships. 02 · Red-team drills #### We attack our own systems. Drills try to break what we built, and the fixes land before the claims do. 03 · Proof before claims #### Nothing ships on a claim we can't prove. Every public number has a source and a date in [the Record](https://www.deimoscore.com/record/). 04 · Defence only #### We build shields. No retaliation tools, no reaching into other people's systems. Metadata only where we observe the public web. §04 · Report a vulnerability ### Found something? Tell us privately. Private vulnerability reporting is switched on for Ratchet and Crimp: open an advisory on GitHub and only the maintainers can see it. Each repository also publishes its security policy. For this site or anything else, use the contacts in our [security.txt](https://www.deimoscore.com/.well-known/security.txt) or message Deimos AI LLC on LinkedIn and we’ll open a private channel. Please don’t report a vulnerability in a public issue. - 01 · Pick the line Ratchet or Crimp: a private advisory on its repository. Anything else: a contact in security.txt. - 02 · Keep it private An advisory is seen only by the maintainers. On LinkedIn we move you to a private channel. - 03 · Not in public Please don’t open a public issue or post details until we have spoken. [Report a Ratchet issue ↗](https://github.com/thearchitect0x-glitch/ratchet/security/advisories/new) [Report a Crimp issue ↗](https://github.com/thearchitect0x-glitch/crimp/security/advisories/new) [Anything else · LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) Policies: [Ratchet](https://github.com/thearchitect0x-glitch/ratchet/security/policy) · [Crimp](https://github.com/thearchitect0x-glitch/crimp/security/policy) /.well-known/security.txt · RFC 9116 As published Contact: https://github.com/thearchitect0x-glitch/ratchet/security/advisories/new Contact: https://github.com/thearchitect0x-glitch/crimp/security/advisories/new Contact: https://www.linkedin.com/company/deimoshq/ Policy: https://www.deimoscore.com/security/#report Preferred-Languages: en Canonical: https://www.deimoscore.com/.well-known/security.txt Expires: 2027-10-18T00:00:00.000Z [Open the file](https://www.deimoscore.com/.well-known/security.txt) Briefing / Q&A ### Briefing: common questions #### How does Deimos AI approach security? As a design rule, not a feature. Our second Flight Rule says assume something is already inside: we design every system as if the attacker already has a key, then make the key not enough. [Field Note 05](https://www.deimoscore.com/field-notes/assume-something-is-already-inside/) shows what that looks like in each instrument. #### What can I verify about Deimos AI’s security myself? Ratchet and Crimp hold a self-certified OpenSSF Best Practices Silver badge (projects 14440 and 14613). Both are open source under Apache-2.0. Crimp’s v0.1.0 release is signed and publishes a SHA-256 checksum, a76f21d53944…38a6. And this page prints the response headers it was served with. #### What is the OpenSSF Best Practices badge? A badge from the Open Source Security Foundation for open-source projects that meet its published criteria, at three levels: passing, silver and gold. A project certifies itself against them, and each project’s answers are public on [bestpractices.dev](https://www.bestpractices.dev/). #### How do I check that a Crimp release wasn’t altered? Download the release and its.sha256 file from [Crimp’s releases](https://github.com/thearchitect0x-glitch/crimp/releases) and compare the SHA-256 of the archive with the published value. The Sigstore bundle published alongside it lets you check who signed it. #### Does this site use cookies or trackers? No. The site sets no cookies and runs no client-side analytics, and its Content-Security-Policy lets only our own code run. This page counts cookies and third-party requests live in your browser, so you can check. #### How do I report a vulnerability? Ratchet and Crimp each publish a security policy in their repositories. For anything else, message [Deimos AI LLC on LinkedIn](https://www.linkedin.com/company/deimoshq/) and we will open a private channel. There is no dedicated disclosure inbox yet. #### Does Deimos AI build offensive tools? No. Defence only. We build shields: no retaliation tools and no reaching into other people’s systems. Where we observe the public web, we read metadata only. --- # The Record · Our claims, sourced and dated URL: https://www.deimoscore.com/record/ Updated: 2026-10-20T14:08:45Z The Record · Deimos AI LLC ## The record. Deimos AI LLC’s claims, each with its status, its source and the date we last checked it. When a claim changes, the change is logged here. Verified · Source linked and checked on the date shown. Live · A running public system, or a value fetched under 24 hours ago. Scheduled · A dated future event. In the lab · Built or being built, not released. Simulation · Runs on synthetic data; makes no real-world claim. Research · Paper work, unpublished. Unproven · Not yet shown. We say so until that changes. Sealed · Not named. Patent pending · A patent application is filed; its number is not published. Object: Deimos, rendered in Cycles from its real shape (Thomas 2000, NASA PDS; 16.0 × 12.7 × 11.1 km). Craters and regolith are procedural, softened as Deimos is; the outline is the model. Orthographic: the bar is 5 km. §01 / Claims ledger ### What we say, and how you can check it. [Signed · Ed25519 · key edc2…cb3a · verify it Unsigned build · how a signed ledger is checked](https://www.deimoscore.com/record/#verify) Filter Hover or focus an entry to trace its value to its source. Age is counted from the date each entry was last checked to today, in your browser. §01·S / The seal Detached signature · Signed · Ed25519 #### This ledger is signed. Check the signature yourself. This copy of the ledger is not signed. The release build that made this page signed the exact bytes of [/data/claims.json](https://www.deimoscore.com/data/claims.json) with a private key that is kept off the web server and out of this site’s source. Your browser can check those bytes against our public key. Change one byte of the ledger and the check fails. Release builds sign the exact bytes of [/data/claims.json](https://www.deimoscore.com/data/claims.json) with a private key kept off the web server. This build was made without it, so there is no signature to check here. The commands below show how a signed copy is checked. The tamper test changes one digit in your own in-memory copy before checking, to show the check can fail. The published file is never touched. The check runs in your browser with JavaScript. Without it, use the commands below. In your browser Not run yet - 01 Fetch /data/claims.json Not run. - 02 Fetch /data/claims.json.sig Not run. - 03 Fetch /.well-known/deimos-record.pub Not run. - 04 Match The key’s fingerprint, against this page Not run. - 05 Verify The Ed25519 signature, over those exact bytes Not run. - 06 Compare The signed file, against this page’s table and changelog The published file, against this page’s table and changelog Not run. Not checked yet. Press Verify: three files are fetched from this site (four, if your browser needs the bundled verifier), and nothing is sent anywhere else. This build carries no signature, so there is nothing to verify. Press Check to compare the published file with this page; one file is fetched from this site. Fingerprint · SHA-256 of the key’s DER encoding · edc2 af9f 8f57 f88d f399 7747 f653 940f a3ff f32e e6e7 5ed1 c7c4 3c2d ec0d cb3a Public key · [/.well-known/deimos-record.pub](https://www.deimoscore.com/.well-known/deimos-record.pub) Signature · [/data/claims.json.sig](https://www.deimoscore.com/data/claims.json.sig) None: this build is unsigned Fallback verifier · @noble/ed25519 3.2.0, MIT ([licence](https://www.deimoscore.com/licenses/noble-ed25519.txt)). Loaded only if your browser’s Web Crypto has no Ed25519. ##### Check it without us OpenSSL 3 mkdir -p deimos-check && cd deimos-check curl -fsS --remote-name-all \ https://www.deimoscore.com/data/claims.json \ https://www.deimoscore.com/data/claims.json.sig \ https://www.deimoscore.com/.well-known/deimos-record.pub openssl pkey -pubin -in deimos-record.pub -outform DER | openssl dgst -sha256 openssl pkeyutl -verify -pubin -inkey deimos-record.pub -rawin -in claims.json -sigfile claims.json.sig Expected output Expected output, from a signed release SHA2-256(stdin)= edc2 af9f 8f57 f88d f399 7747 f653 940f a3ff f32e e6e7 5ed1 c7c4 3c2d ec0d cb3a Signature Verified Successfully The first line must match the fingerprint printed above. Run it in an empty folder: curl replaces files of the same name. Tested with OpenSSL 3.6.4 and 4.0.3; the LibreSSL that ships with macOS can’t read Ed25519 keys (Homebrew: openssl@3). This build published no signature, so curl stops at claims.json.sig with HTTP 404. Node.js mkdir -p deimos-check && cd deimos-check curl -fsS --remote-name-all \ https://www.deimoscore.com/data/claims.json \ https://www.deimoscore.com/data/claims.json.sig \ https://www.deimoscore.com/.well-known/deimos-record.pub node --input-type=module <<'JS' import { createPublicKey, createHash, verify } from 'node:crypto'; import { readFileSync as read } from 'node:fs'; const key = createPublicKey(read('deimos-record.pub')); console.log(createHash('sha256').update(key.export({ type: 'spki', format: 'der' })).digest('hex')); console.log(verify(null, read('claims.json'), key, read('claims.json.sig')) ? 'VALID': 'INVALID'); JS Expected output Expected output, from a signed release edc2 af9f 8f57 f88d f399 7747 f653 940f a3ff f32e e6e7 5ed1 c7c4 3c2d ec0d cb3a VALID The first line must match the fingerprint printed above. Run it in an empty folder: curl replaces files of the same name. Tested with Node.js 25.9; it uses only node:crypto and node:fs. This build published no signature, so curl stops at claims.json.sig with HTTP 404. ##### What a valid seal proves - The ledger file is byte for byte what one of our release builds signed. - It was signed with the private key that belongs to the public key above. - Every row of the table above shows the signed value, status, source and date, and the file is the edition this page shows (step 06). ##### What it doesn’t - That each claim is true. Its source, status and date do that job. - When it was signed. The signature carries no time. The file states the date it was built (UTC) and the newest changelog entry it includes, and the signature covers both: an older signed copy still verifies, but it shows its age. - That this whole site is ours. The key, the signature and this page come from the same place, so someone who replaced the site could replace all three. Keep a copy of the fingerprint. If it ever changes, an entry in our changelog can’t vouch for the new key on its own, because whoever could replace the key could write the entry too: confirm it with us through a channel you already trust before you rely on it. §02 / Changelog ### What changed, and when. [Atom /record/feed.xml](https://www.deimoscore.com/record/feed.xml) Every entry below, for any feed reader. Nothing to sign up for. - CL-13 2026-10-20 Revised The note on the private beta’s opening date no longer says clockford.com calls the event a closed beta: since 20 Oct 2026, clockford.com says private beta too. The date and time are unchanged. - CL-12 2026-10-20 Published The [Newsroom](https://www.deimoscore.com/newsroom/) opens: dated announcements, each backed by an entry here, with a [fact sheet](https://www.deimoscore.com/newsroom/#fact-sheet) generated from the ledger and the [press kit](https://www.deimoscore.com/newsroom/#press-kit). It has its own [Atom feed](https://www.deimoscore.com/newsroom/feed.xml). The site is served at www.deimoscore.com, and deimoscore.com redirects there. [Newsroom · NR-01](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) - CL-11 2026-10-20 Published For readers and crawlers: [Field Notes](https://www.deimoscore.com/field-notes/) now has its own [Atom feed](https://www.deimoscore.com/field-notes/feed.xml); every page is listed at [/sitemap/](https://www.deimoscore.com/sitemap/); the text of every page is in one file, [/llms-full.txt](https://www.deimoscore.com/llms-full.txt); and [/sitemap.xml](https://www.deimoscore.com/sitemap.xml) is now an index of one sitemap per section, whose dates move only when a page’s own content changes. robots.txt now names the search, answer and training crawlers it admits, and admits them all. This changelog’s feed re-issued its entry ids once, so a feed reader may show these entries again. [Newsroom · NR-01](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) - CL-10 2026-10-20 Revised The published Ratchet run’s ledger rows now say what their source says: a simulated runaway agent (a script standing in for an agent loop) fired 100 concurrent charge attempts against a surge ceiling of 20 per hour; 20 executed and 80 were denied at the gate, all 100 settled in 341 ms. The rows previously said “against a budget” (changed 20 Oct without an entry here), then “by a looping agent”, and “reached the vendor”; the run’s script calls no vendor, so it charged nothing. The [Ratchet FAQ](https://www.deimoscore.com/ratchet/#faq), the [replay on the Ratchet page](https://www.deimoscore.com/ratchet/#pawl) and the home page’s card for the run now say the same. The status legend now defines Patent pending, which two rows already use. The Clockford™ opening row now says private beta, as [CL-03](https://www.deimoscore.com/record/#cl-03) does, and the OpenSSF rows, like every mention of the badge on this site, now say the Silver badge is self-certified. The free-plan row now says its 1,000 gated effects a month apply on a workspace whose email has been confirmed, and the founding row’s label now reads “Deimos AI LLC founded”. - CL-09 2026-10-19 Revised Privacy notice P-0 Rev B: new [clause 05, the Marklode checker](https://www.deimoscore.com/privacy/#p5). The site’s Content-Security-Policy now lets [/marklode/](https://www.deimoscore.com/marklode/#check) connect to https://api.marklode.com/v1/verify, only after you press Check. Clause 06 now also lists the Ratchet replay’s run file and the files the Record fetches when you press Verify, all from this site. - CL-08 2026-10-19 Signed Release builds now sign the claims ledger: the exact bytes of [/data/claims.json](https://www.deimoscore.com/data/claims.json), with Ed25519, and the signature is published at [/data/claims.json.sig](https://www.deimoscore.com/data/claims.json.sig). The public key is [/.well-known/deimos-record.pub](https://www.deimoscore.com/.well-known/deimos-record.pub), its fingerprint printed in [the seal](https://www.deimoscore.com/record/#verify). The signed file states the date it was built and the newest changelog entry it includes. A new key will always be logged here. This changelog is now also an [Atom feed](https://www.deimoscore.com/record/feed.xml). [Newsroom · NR-01](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) - CL-07 2026-10-19 Published [Legal](https://www.deimoscore.com/legal/) published (LG-0, Rev A): which terms govern this site and each instrument, the open-source licences, trademarks, patents, and cookies and storage. Every page now names our live sites and GitHub in its menu and footer. - CL-06 2026-10-18 Published Company pages published: [The Company](https://www.deimoscore.com/company/), [Open a channel](https://www.deimoscore.com/contact/), [Brand & press](https://www.deimoscore.com/brand/), the [privacy notice](https://www.deimoscore.com/privacy/) (P-0, Rev A) and the [terms of use](https://www.deimoscore.com/terms/) (T-0, Rev A). Disclosure contacts published at [/.well-known/security.txt](https://www.deimoscore.com/.well-known/security.txt). - CL-05 2026-10-18 Release The site becomes a public record: every public number now lives in one ledger with its status, source and date. Project Vessel, NeuroPhonics Module 1 and the Pastel Series are released from the Lab to their own pages. Tonight's Deimos joins every page, from NASA/JPL Horizons. [Newsroom · NR-01](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) - CL-04 2026-10-17 Recount Marklode census recount: 45,156 servers behind 156,111 public MCP registry entries; 29.6% with no public repo. [Newsroom · NR-02](https://www.deimoscore.com/newsroom/2026-10-20-the-october-mcp-registry-recount/) - CL-03 2026-10-17 Announcement Clockford™ Founding Startups announced: 10 seats for the private beta that opens Nov 10th, 2026. - CL-02 2026-09-13 Release Crimp v0.1.0 published as a signed, open-source release (Apache-2.0). - CL-01 2026-09-12 Census Marklode's first census of the public MCP registry: 31,309 servers behind 101,219 entries. Superseded by the October recount. §03 / Performance budget ### Restraint, measured. Measure · Target · This page, in your browser · Against target · Largest Contentful Paint · ≤ 2.5 s · measuring… · · Cumulative Layout Shift · ≤ 0.1 · measuring… · · Interaction to Next Paint · ≤ 200 ms · measured on interaction · · JavaScript outside the 3D hero · ≤ 150 KB gzipped · measuring… · · Total transferred · as little as possible · measuring… · · Cookies · 0 · 0 · · Third-party requests · 0 · 0 · · Values in the last column come from your own browser's Performance API, not from us. §04 / Credits & data sources ### Whose shoulders. Ephemeris · NASA/JPL Horizons system, body 402 (Deimos), Sun (10) vectors relative to Mars. [ssd.jpl.nasa.gov/horizons ↗](https://ssd.jpl.nasa.gov/horizons/) Mars imagery · NASA/Jet Propulsion Laboratory & Caltech, a 3D texture made from Viking Orbiter images processed by the USGS. [science.nasa.gov ↗](https://science.nasa.gov/3d-resources/mars/) Shape of Deimos · P. C. Thomas, Small Body Shape Models (Viking Orbiter data), NASA Planetary Data System, Small Bodies Node. [sbn.psi.edu ↗](https://sbn.psi.edu/pds/resource/oshape.html) Type · Archivo (its expanded width for headlines), Archivo Narrow and DM Mono, via Fontsource, under the SIL Open Font License 1.1. Served from this site. See [Brand & press](https://www.deimoscore.com/brand/). Affiliation · Deimos AI LLC is not affiliated with or endorsed by NASA, JPL, the USGS, the NSA or any government agency. Data are credited, not claimed. Plate DM-02. The shoulders this site stands on: three orthographic views of the Deimos shape model, on the model’s own 10° grid, hidden lines removed. Extents 16.0 × 12.7 × 11.1 km. Source · P. C. Thomas (2000), NASA PDS Small Bodies Node, via [/data/deimos-shape.json](https://www.deimoscore.com/data/deimos-shape.json). The file records no longitude handedness; read as east-positive (if it is west-positive, two views mirror). Briefing / Q&A ### Briefing: common questions #### What is the Deimos AI Record? Deimos AI LLC’s claims, each with its status, its source and the date we last checked it. When a claim changes, the change is logged here. #### What do the statuses in the ledger mean? VERIFIED: source linked and checked on the date shown. LIVE: a running public system or a value fetched in the last day. SCHEDULED: a dated future event. IN THE LAB: built or being built, not released. SIMULATION: runs on synthetic data and makes no real-world claim. RESEARCH: paper work, unpublished. SEALED: not named. UNPROVEN: a limit we state because it has not been measured yet. #### Can I download the claims? Yes. The ledger is published as [claims.json](https://www.deimoscore.com/data/claims.json), the same file this site is built from. Every number on every page is read from it. #### Why does a company publish a ledger of its own claims? Our third flight rule: if it matters, make it provable. A claim should come with a source you can open and a date you can check. Don’t trust us; check us. #### Where does the moon on every page come from? From NASA/JPL Horizons, body 402. The build fetches Deimos’s real position and the site interpolates between those rows; nothing is invented. See [Tonight’s Deimos](https://www.deimoscore.com/record/ephemeris/). #### What is the changelog? A dated list of what changed in the ledger, newest first: a recount, a release, a claim corrected or withdrawn. See [the changelog](https://www.deimoscore.com/record/#changelog). #### How are the hashes on the Record made? Only by the build, from a file we hold or a checksum its maker published. The NeuroPhonics run export is hashed when the site is built, and Crimp’s release checksum, a76f21d53944…38a6, is fetched from the release itself. We never print an illustrative hash. #### Where are terms like “effect gate” defined? In the [glossary](https://www.deimoscore.com/glossary/): plain definitions of the terms used across this site, each linked to the instrument or note where it matters. --- # Tonight’s Deimos · Live position of the moon from NASA/JPL URL: https://www.deimoscore.com/record/ephemeris/ Updated: 2026-10-19T22:36:22Z Tonight's Deimos · Mars II ## Where Deimos is tonight. The smaller moon of Mars, as NASA/JPL Horizons computes it, interpolated to this minute in your browser. Live Source linked Object: Deimos as seen from Earth · 18 Oct 2026 21:00 UTC · phase 43° · celestial north up · shape: Thomas (2000), NASA PDS · ephemeris: NASA/JPL Horizons. Rendered in Cycles with the real Sun as the only light; regolith texture is procedural. A still for that time; the bar is 5 km. ### The readout Epoch · your clock -- Data age -- Live Interpolating -- Data window -- Right ascension -- hours, minutes, seconds of arc east Declination -- north of the celestial equator Distance from Earth -- Range rate -- from two readings a minute apart Signal delay, one way -- at the speed of light Elongation from the Sun -- as seen from Earth Phase angle (Sun–Mars–Deimos) -- Orbit 30.30 h 23,457 km from the centre of Mars Every value is interpolated in your browser from the NASA/JPL Horizons rows in [/data/deimos.json](https://www.deimoscore.com/data/deimos.json): sky positions every six hours, Mars-centred vectors every hour. A value outside the file’s window is not shown, rather than guessed. Elongation and phase use the Horizons Sun vectors; no constellation is printed because we hold no boundary data. §02 / The next 30 days ### Its path across the sky. Right ascension and declination as seen from Earth, every six hours. The dot is now. Move across the track to read any six-hour row Plotted from NASA/JPL Horizons rows in /data/deimos.json. Plate EP-02. Further out: Deimos across the sky from 18 Oct 2026 to 1 Jun 2027 traces a retrograde loop, closest to Earth on 20 Feb 2027 at 0.678 AU. Right ascension increases to the left; line weight follows distance; no stars are drawn, because we hold no star data. Source · NASA/JPL Horizons, body 402, via [/data/deimos.json](https://www.deimoscore.com/data/deimos.json) (6-hourly rows). Closest approach found in the data. §03 / Why a moon ### The only telemetry on this site is real telemetry. Defence sites love telemetry: scrolling system IDs, blinking coordinates, numbers that mean nothing. We wanted the opposite. Deimos AI LLC is named for the moon Deimos, so the one live readout on every page is where that moon actually is, fetched from NASA/JPL Horizons and checked by anyone who wants to. It is a small promise that stands for a larger one. If we put a number on this site, it has a source, a date and a status in [the Record](https://www.deimoscore.com/record/). Including the moon. Plate EP-01. Deimos around Mars, hourly for 72 hours from 18 Oct 2026 21:00 UTC: as seen from Earth (left, positions behind the planet hidden) and in its own plane, to scale (right). Period measured from the table: 30.30 h. Source · NASA/JPL Horizons via [/data/deimos.json](https://www.deimoscore.com/data/deimos.json). One outside number: Mars’s radius, 3,389.5 km, from the NASA Mars Fact Sheet. Briefing / Q&A ### Briefing: common questions #### Where is the moon Deimos tonight? This page shows its right ascension, declination and distance from Earth right now, interpolated in your browser between positions computed by NASA/JPL Horizons. #### What is NASA/JPL Horizons? JPL’s online system for computing where bodies in the solar system are. Deimos is body 402 in [Horizons](https://ssd.jpl.nasa.gov/horizons/). #### How long does Deimos take to orbit Mars? 30.30 h, at an average distance of 23,457 km from the centre of Mars, according to [JPL’s satellite mean elements](https://ssd.jpl.nasa.gov/sats/elem/). #### Why does Deimos move so slowly across the Martian sky? Its orbit takes only a little longer than a Martian day, so seen from the surface it barely outpaces the planet’s turning and drifts slowly from east to west. #### Why is a security company named after a moon? Deimos is Greek for dread, and the name of the smaller moon of Mars. Agents act while you sleep; we build so you never have to feel that dread. The live position on every page is the one piece of telemetry on this site, and it is real. #### How often is the position updated? Every build fetches a fresh table of positions from Horizons, and your browser interpolates between its rows to the current minute. The raw data is published at [/data/deimos.json](https://www.deimoscore.com/data/deimos.json). --- # Field Notes · Dated essays on keeping AI agents in hand URL: https://www.deimoscore.com/field-notes/ Updated: 2026-10-20T13:42:00Z Field Notes · Deimos AI LLC ## Field notes. Dated essays on how we build, each tied to one Flight Rule and one instrument, with the sources in the margin. ### The notes, newest first - [2026-10-18 FR-4 · Ratchet At most once: why we refuse the stronger word. “Exactly once” sells better. It also can't be true for an action that leaves your system. Here is the promise we make instead, and why it's the one worth having. Read the note →](https://www.deimoscore.com/field-notes/at-most-once/) - [2026-10-18 FR-4 · Crimp Unknown never seals: how Crimp handles a missing fact. When a fact the decision stood on goes missing, the easy move is to call it a no. Crimp refuses to. Here is why “we don't know” is never allowed to quietly become “denied.” Read the note →](https://www.deimoscore.com/field-notes/unknown-never-seals/) - [2026-10-18 FR-3 · Marklode What 45,156 MCP servers tell you, and what they don’t. We counted the public MCP registry without touching a single server. Here is what the number means, what it can't mean, and why we say “metadata only” every time. Read the note →](https://www.deimoscore.com/field-notes/mcp-servers-census/) - [2026-10-18 FR-1 · M.A.X Why M.A.X does not detect deception. A machine that claims to spot a liar is selling you something. M.A.X measures a person against their own baseline and shows you where to look; then a person decides what it means. Read the note →](https://www.deimoscore.com/field-notes/why-max-does-not-detect-deception/) - [2026-10-18 FR-2 · Security Assume something is already inside. We design every system as if the attacker already has a key, and then we make the key not enough. Here is what that rule actually changes about how we build. Read the note →](https://www.deimoscore.com/field-notes/assume-something-is-already-inside/) --- # At most once: why we refuse the stronger word · Field Notes URL: https://www.deimoscore.com/field-notes/at-most-once/ Updated: 2026-10-18T00:00:00Z Field Note 01 · Deimos AI LLC · 2026-10-18 ## At most once: why we refuse the stronger word. An agent is about to charge a card. It sends the request. The connection drops. Did the charge go through? The agent doesn't know, and neither does anything else in its stack. So it does what software has always done: it tries again. That retry is where the money goes. A supervisor re-runs the task. Two workers pick up the same job. A process wakes from a crash with no memory of what it did a minute ago. Each of them is behaving correctly, and together they charge the card three times. The tempting answer is a product that promises exactly once. We don't make that promise, and we don't let our own copy make it either. ### Why not exactly once An effect that leaves your system, a charge, a deploy, an email, happens somewhere you don't control. Between “I asked the vendor to do it” and “I learned that it was done” there is always a gap, and a crash can land in that gap. When it does, nobody on your side can know whether the effect happened. Any system that claims to guarantee exactly once across that gap is either quietly guessing or quietly retrying. What can be guaranteed is narrower and more useful: the same action is started at most once. Every later attempt, whether it is a retry, a restart or a racing worker, gets the recorded answer instead of a second try. ### What we say when we don't know The hard case is the crash inside the gap. Here Ratchet does something most systems avoid: it says so. The effect is marked indeterminate, a known unknown, and your policy for that kind of effect decides what happens next: block it, check with the vendor, or allow a retry you chose on purpose. Never a silent retry. That is Flight Rule FR-4 in practice. Bend, don't break: when we don't know, we say so, and unknown never quietly becomes yes. ### Why the smaller promise wins A promise you can keep is worth more than one you can't. “At most once, and an honest unknown” is something an engineer can build on, an auditor can check, and a finance team can reconcile against the vendor's own records. “Exactly once” is something you find out was false on the day it matters. So the stronger word stays out of our product, our docs and this site. If you see it anywhere near Ratchet, tell us and we'll log the correction in [the Record](https://www.deimoscore.com/record/). Deimos AI LLC · Field Notes [Open Ratchet's file →](https://www.deimoscore.com/ratchet/) [ratchetgate.com ↗](https://ratchetgate.com) --- # Unknown never seals: how Crimp handles a missing fact URL: https://www.deimoscore.com/field-notes/unknown-never-seals/ Updated: 2026-10-18T00:00:00Z Field Note 02 · Deimos AI LLC · 2026-10-18 ## Unknown never seals. Somewhere right now an automated system is deciding whether a person gets something: a benefit, a claim, a treatment that needs approval first. It has a rule and it has some facts. One of the facts is missing. What does it do? Most systems answer the question without noticing they were asked it. The missing field is empty, the empty field fails a check, the check returns false, and false becomes no. Nobody decided that a gap in the record should count against the person. It just did, because that is what an empty field does when nobody tells it otherwise. Crimp is built so that never happens quietly. Its rule is short enough to fit on a badge: unknown never seals. ### Three answers, not two A decision in Crimp starts with a rule and a set of facts. The agent brings both, and it never brings a conclusion: there is no field in which it can assert one. Crimp evaluates the rule, works out the outcome, and seals the rule before anyone knows which way it went, so nobody can tune it after seeing the result. When every fact the rule needs is present, the outcome is yes or no. When one is missing, the outcome is neither. The decision stays open. It does not seal, it does not collapse into a denial, and it does not drift into an approval because the system was in a hurry. “We don’t know” is a third answer, and it is reported as one. That sounds like a small distinction. It is the whole difference between a system that decides and a system that guesses. ### When a fact breaks Sealing a decision is half of the job. The other half is what happens afterwards. Facts change: an income is corrected, a document turns out to be the wrong one, a test result is reissued. In most systems the decision made on the old fact simply stays where it is, until someone remembers to look at it again. Usually, nobody does. In Crimp each fact is crimped to the decision it supports, the way a connector is crimped to a wire. Crimp re-evaluates the sealed rule against fresh facts. If the rule no longer holds, the seal lapses and the decision withdraws itself. No authority overrode it and nobody won an argument. A fact changed, and the decision followed the fact. ### Why this matters for the decisions nobody appeals Appeals are the usual safety net, and the numbers show how thin it is. In 2024, Medicare Advantage insurers made 52.8 million prior authorization determinations. 7.7% were denied in full or in part. Only 11.5% of those denials were appealed, and 80.7% of the appeals were overturned in full or in part. A reversal does not prove the first decision was wrong: some appeals succeed because a missing document was added. That is exactly the point. A decision that was waiting on a fact should have said so. And for the denials nobody appeals, the figures tell us nothing at all. A system that re-checks a decision whenever a fact under it changes does not depend on the person finding the energy to complain. ### What Crimp does not do Crimp reports; it does not authorise. It holds no credentials, has no outbound access and executes nothing. When something asks what stands, Crimp returns the determinations that still hold, and the caller decides what to do with them. An empty answer means nothing has been decided. It does not mean allowed. That restraint is deliberate. A decision gate that could also act would be tempted to fill its own gaps. Keeping Crimp on the reporting side of the line is what lets it say “unknown” and mean it. ### The flight rule underneath Our fourth Flight Rule is Bend, don’t break: when we don’t know, we say so, and unknown never quietly becomes yes, and never quietly becomes no. Ratchet applies it to actions, by marking an effect indeterminate instead of retrying blind. Crimp applies it to decisions about people. Crimp is open source under Apache-2.0, with a signed v0.1.0 release published 13 Sep 2026, so the rule that enforces this is a rule you can read. A decision gate you can’t inspect is just another black box, and a black box is where unknowns go to become answers. Deimos AI LLC · Field Notes · 723 words [Open Crimp’s file →](https://www.deimoscore.com/crimp/) [Crimp on GitHub ↗](https://github.com/thearchitect0x-glitch/crimp) --- # What 45,156 MCP servers tell you, and what they don’t URL: https://www.deimoscore.com/field-notes/mcp-servers-census/ Updated: 2026-10-18T00:00:00Z Field Note 03 · Deimos AI LLC · 2026-10-18 ## What 45,156 MCP servers tell you, and what they don’t. Ask how many MCP servers exist and you will get a confident number. Most of those numbers are counts of something else: registry listings, package versions, repositories that mention the protocol. Marklode wanted the number underneath, so we counted it, and we want to be just as clear about what the count can carry. ### How the count is made The Model Context Protocol (MCP) lets AI agents call out to tools and data through servers. Public registries list those servers. Marklode reads the public registry listings, then deduplicates them into the distinct servers behind them: the same server published under several versions, names or entries counts once. It is metadata only. No MCP server is ever contacted, probed or pinged. We read what was published about each server, and nothing else. That is a deliberate limit, and it shapes everything below. ### What the count says The October 2026 recount read 156,111 registry entries. Deduplicated, they come to 45,156 distinct servers. The first census, on 2026-09-12, found 31,309 servers behind 101,219 entries. Three things follow. First, entries are not servers: a registry count overstates the field several times over, and any headline built on raw listings is counting versions and duplicates. Second, the field is moving fast: the distinct-server count rose from 31,309 to 45,156 between the first count and the recount. Third, a large share of servers can’t be inspected at all: 13,383 of them, 29.6%, have no public source repository. That last figure is the one we would put in front of anyone wiring an agent to a server they found in a registry. Nearly three in ten servers offer no public code to read. That does not make them unsafe. It means you can’t check, and checking is the habit we are trying to build. ### What the count does not say It does not say any server is safe, or unsafe. We never ran one, so we can’t tell you what any of them does. It does not say how many servers are maintained, used, or used by anyone at all. A listing is a claim that something exists, not evidence that anyone depends on it. It does not rank servers or vendors, and money never buys a place in it. It does not say a server without a public repository is hiding anything; plenty of honest software is closed source. And it is a snapshot. Registries change daily, which is why the census is recounted monthly and every figure on this site carries the date it was checked. ### Why a diligence company counts registries Marklode’s day job is startup due diligence before the pitch: who else is doing this, what got there first, the three strongest attacks on the idea, and a verdict on what survives. The census is the same discipline pointed at a public question. Count the thing itself, not its shadow. Say what the count supports. Say, just as plainly, what it doesn’t. That is our third Flight Rule, If it matters, make it provable. Every figure in this note is an entry in [the Record](https://www.deimoscore.com/record/), with its source and the date we last checked it. If a number changes, the change is logged there, not quietly edited here. ### If you build with MCP Before you connect an agent to a server you found in a registry, ask three questions the census can’t answer for you. Is there code I can read? Who maintains it, and when did they last change it? What can it reach once my agent calls it? If the answer to the first is no, the other two get harder, and the guardrails around your agent matter more. That is where the rest of our fleet comes in. Deimos AI LLC · Field Notes · 618 words [Open Marklode’s file →](https://www.deimoscore.com/marklode/) [marklode.com ↗](https://marklode.com) Plate ML-02. The registry day by day: new servers per day by the date the registry first listed them (bars) and the running total (line), 8 Sep 2025 to 17 Oct 2026. A first-listed date is when the registry recorded a server, not when it was built. Source · [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) · as of 2026-10-17 Metadata only. --- # Why M.A.X does not detect deception · Deimos Field Notes URL: https://www.deimoscore.com/field-notes/why-max-does-not-detect-deception/ Updated: 2026-10-18T00:00:00Z Field Note 04 · Deimos AI LLC · 2026-10-18 ## Why M.A.X does not detect deception. Every tool that looks at people on video gets asked the same question, usually in the first meeting: can it tell when someone is lying? For M.A.X the answer is no, and it is the most important line in its design. M.A.X does not detect deception. It is written on its page, in its interface and here, and it will stay there. That is not modesty. It is a choice about who decides. ### What M.A.X does M.A.X is offline-first analysis of video a litigation team already has: a deposition, recorded testimony, an interview. It reads six channels together on one timeline: face, eyes, voice, speech, body and pulse. The opening minutes set what normal looks like for that person, and from then on M.A.X shows where their behaviour moves away from their own baseline. Not away from people in general. Away from them. Each person is their own control, so nobody is measured against a stereotype of how a nervous witness, a confident one or a truthful one is supposed to look. The output is a set of flags on a timeline: here, several channels changed at once. That is all. A flag means “look here”. It never means “this person lied”. ### Why a change is not a lie A person’s behaviour changes for many reasons. A hard question. A painful memory. Fatigue at the end of a long day. A lawyer’s interruption, a bad chair, a cough, a sudden urge to get it right. Some of those changes will sit next to an untrue statement. Most of them won’t. Nothing in a moment of video can tell you which kind of change you are looking at. A tool that turned those changes into a verdict would be taking a guess and presenting it as a measurement. In a courtroom, or a negotiation that decides a case, that guess would carry the authority of software. People defer to a number on a screen, especially one that sounds scientific. We will not hand them that number. ### Flags, not verdicts So M.A.X stops one step earlier, on purpose. It narrows hours of footage to the moments worth a second look, and then it gets out of the way. A trained person on the case team watches those moments, with everything else they know about the matter, and decides what any change means. Maybe it is a line of questioning worth returning to. Maybe it is nothing. This is our first Flight Rule at work: people stay in charge of what matters. An agent, or an analysis, can propose anything. A person decides what can’t be undone, and a judgement about whether someone told the truth is about as hard to undo as anything gets. ### Why it runs offline Discovery is privileged. Testimony is some of the most sensitive material a firm holds. M.A.X runs on the team’s own hardware, offline, and the evidence stays where they put it. No upload, no cloud account, no second copy on someone else’s server. Keeping the analysis local also keeps the decision local: the people who are accountable for the case are the people looking at the flags. ### Why it is still in the lab M.A.X handles evidence that can decide a case, so it ships when it is ready and not before. Until then it stays marked in the lab in the Record, and nothing on this site claims more for it than it does today. When it does ship, the line at the top of this note ships with it. We would rather sell a tool that tells you where to look than one that tells you what to think. Deimos AI LLC · Field Notes · 606 words [Open M.A.X’s file →](https://www.deimoscore.com/max/) [Follow on LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) --- # Assume something is already inside · Deimos Field Notes URL: https://www.deimoscore.com/field-notes/assume-something-is-already-inside/ Updated: 2026-10-20T13:42:00Z Field Note 05 · Deimos AI LLC · 2026-10-18 ## Assume something is already inside. Most security starts with a wall. Keep the attacker out, and everything inside can trust everything else. Our second Flight Rule starts from the opposite end: assume something is already inside. We design every system as if the attacker already has a key. Then we make the key not enough. ### Why the wall stopped being the point The actor that matters most is no longer the stranger at the gate. It is the one with legitimate access: a person with a valid login, or, more and more, an AI agent that was handed credentials so it could do its job. An agent with a payment key can charge a card. An agent with deploy rights can ship code. When it is wrong, confused or hijacked, it is wrong from inside the wall, with a real key in its hand. So the useful question is not “how do we keep it out?” but “what can it do once it is in, and how do we know?” ### What the rule looks like in our instruments Ratchet holds nothing worth stealing. It gates actions that can’t be taken back, but it never touches the vendor: no credentials, no outbound access, no proxy. Your code does the work and reports what happened. If someone took over Ratchet, they would find a ledger, not a payment key. And a budget the agent can’t raise means a hijacked agent hits a ceiling instead of a bank balance. Crimp can’t be talked into a verdict. An agent submits a rule and facts, never a conclusion, and there is no field where it could assert one. A compromised agent can propose a bad rule, but a bad rule is visible, reviewable and reproducible in a way a bad conclusion never is. Crimp itself holds no credentials and executes nothing. Clockford™ keeps its methods to itself. We publish what it does for you, and we withhold how it does it until launch. Assuming something is already inside includes assuming someone is reading our website. ### What the rule looks like on this site The page you are reading follows the same rule. Its Content-Security-Policy lets only our own code run. It sets no cookies and carries no client-side analytics, so there is no third-party script waiting to be the thing that is already inside. Our [security page](https://www.deimoscore.com/security/) fetches its own response headers and prints them, so you can check this rather than take our word for it. ### What you can check today Ratchet and Crimp each hold a self-certified OpenSSF Best Practices Silver badge, projects 14440 and 14613. Both are open source under Apache-2.0, so the code that enforces these rules can be read line by line. Crimp’s v0.1.0 release is signed, and the build of this site fetches its published SHA-256, a76f21d53944…38a6, from the release itself, so the digest in our Record is the one on the release and not one we typed. None of that proves a system is secure. It proves something narrower and more useful: that the claims are checkable, and that we expect you to check them. ### How we work, without the methods Defence code is reviewed by someone who did not write it before it ships. We run red-team drills against our own systems, and the fixes land before the claims do. Nothing ships on a claim we can’t prove. And we build shields only: no retaliation tools, no reaching into other people’s systems, metadata only where we observe the public web. ### Where the rule is going The old computer-security criteria were written for machines and the people cleared to use them. The [Pastel Series](https://www.deimoscore.com/pastel/) is our research revisiting them for a world where the actor inside may be a person or an AI agent. It is unpublished and in progress. The rule it starts from is the one in this note’s title. Deimos AI LLC · Field Notes · 639 words [Read the security posture →](https://www.deimoscore.com/security/) [The Pastel Series →](https://www.deimoscore.com/pastel/) --- # Newsroom · Dated announcements from Deimos AI LLC URL: https://www.deimoscore.com/newsroom/ Updated: 2026-10-20T14:08:45Z Newsroom · Deimos AI LLC ## Newsroom. Dated announcements from Deimos AI LLC. Each one is backed by an entry in the Record’s changelog, and its numbers are pinned as they stood the day it went out. [Press kit](https://www.deimoscore.com/newsroom/#press-kit) [Fact sheet](https://www.deimoscore.com/newsroom/#fact-sheet) [Media contact](https://www.deimoscore.com/newsroom/#contact) [Atom feed](https://www.deimoscore.com/newsroom/feed.xml) §01 / The items ### Announcements, newest first. - [NR-02 2026-10-20 · 13:42 UTC Recount On the record · CL-04 Marklode publishes its October recount of the public MCP registry. The recount found 156,111 registry entries behind 45,156 distinct MCP servers; 29.6% of those servers list no public source repository. Read the item →](https://www.deimoscore.com/newsroom/2026-10-20-the-october-mcp-registry-recount/) - [NR-01 2026-10-20 · 13:42 UTC Release On the record · CL-05 · CL-08 · CL-11 · CL-12 Deimos AI LLC publishes a signed public claims ledger. Deimos AI LLC now keeps its public claims in one signed ledger, each with its status, its source and the date it was last checked. Read the item →](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) §02 / Before the Newsroom ### Already on the record. - [2026-10-20 CL-13 Revised clockford.com says private beta too](https://www.deimoscore.com/record/#cl-13) - [2026-10-20 CL-10 Revised The Ratchet run’s ledger rows say what their source says](https://www.deimoscore.com/record/#cl-10) - [2026-10-19 CL-09 Revised Privacy notice P-0 Rev B](https://www.deimoscore.com/record/#cl-09) - [2026-10-19 CL-07 Published Legal published (LG-0, Rev A)](https://www.deimoscore.com/record/#cl-07) - [2026-10-18 CL-06 Published Company pages published](https://www.deimoscore.com/record/#cl-06) - [2026-10-17 CL-03 Announcement Clockford™ Founding Startups announced](https://www.deimoscore.com/record/#cl-03) - [2026-09-13 CL-02 Release Crimp v0.1.0 published as a signed, open-source release (Apache-2.0)](https://www.deimoscore.com/record/#cl-02) - [2026-09-12 CL-01 Census Marklode's first census of the public MCP registry](https://www.deimoscore.com/record/#cl-01) §03 / Fact sheet FS-0 · Fact sheet · Deimos AI LLC · as of 2026-10-20 ### The facts, from the ledger. Every row is an entry in the Record: its value, its status and the date it was last checked come from the ledger, which also keeps its source. When the ledger changes, this sheet does. #### Deimos AI LLC Fact · Value · Status · As of · Check · Projects holding a self-certified OpenSSF Best Practices Silver badge (Ratchet, Crimp) · 2 · VERIFIED · as of 2026-10-20 · [Check Projects holding a self-certified OpenSSF Best Practices Silver badge (Ratchet, Crimp) on the Record](https://www.deimoscore.com/record/#claim-openssf-silver-projects) · #### Ratchet Fact · Value · Status · As of · Check · Gated effects a month on Ratchet's free plan, no card, on a workspace whose email has been confirmed · 1,000 · VERIFIED · as of 2026-10-20 · [Check Gated effects a month on Ratchet's free plan, no card, on a workspace whose email has been confirmed on the Record](https://www.deimoscore.com/record/#claim-ratchet-free-effects) · HTTP calls to gate an action: one before, one after · 2 · VERIFIED · as of 2026-10-18 · [Check HTTP calls to gate an action: one before, one after on the Record](https://www.deimoscore.com/record/#claim-ratchet-http-calls) · Ratchet source licence · Apache-2.0 · VERIFIED · as of 2026-10-18 · [Check Ratchet source licence on the Record](https://www.deimoscore.com/record/#claim-ratchet-licence) · OpenSSF Best Practices project ID, Silver badge (self-certified) · 14440 · VERIFIED · as of 2026-10-20 · [Check OpenSSF Best Practices project ID, Silver badge (self-certified) on the Record](https://www.deimoscore.com/record/#claim-ratchet-openssf) · Ratchet's MCP server, published on npm · ratchet-mcp · VERIFIED · as of 2026-10-18 · [Check Ratchet's MCP server, published on npm on the Record](https://www.deimoscore.com/record/#claim-ratchet-npm) · Concurrent charge attempts by a simulated runaway agent (a script standing in for an agent loop) against a surge ceiling of 20 per hour, published run on the live service · 100 · VERIFIED · as of 2026-10-20 · [Check Concurrent charge attempts by a simulated runaway agent (a script standing in for an agent loop) against a surge ceiling of 20 per hour, published run on the live service on the Record](https://www.deimoscore.com/record/#claim-ratchet-run-attempts) · Attempts executed in that run: the gate’s execute decisions (the transcript’s “reached the vendor”; the run’s script calls no vendor, so it charged nothing) · 20 · VERIFIED · as of 2026-10-20 · [Check Attempts executed in that run: the gate’s execute decisions (the transcript’s “reached the vendor”; the run’s script calls no vendor, so it charged nothing) on the Record](https://www.deimoscore.com/record/#claim-ratchet-run-executed) · Attempts denied at the gate in that run · 80 · VERIFIED · as of 2026-10-20 · [Check Attempts denied at the gate in that run on the Record](https://www.deimoscore.com/record/#claim-ratchet-run-denied) · Time to settle all 100 attempts in that run · 341 ms · VERIFIED · as of 2026-10-20 · [Check Time to settle all 100 attempts in that run on the Record](https://www.deimoscore.com/record/#claim-ratchet-run-ms) · #### Crimp Fact · Value · Status · As of · Check · Crimp's latest signed release · v0.1.0 · VERIFIED · as of 2026-10-18 · [Check Crimp's latest signed release on the Record](https://www.deimoscore.com/record/#claim-crimp-release-version) · Crimp v0.1.0 signed release published · 13 Sep 2026 · VERIFIED · as of 2026-10-18 · [Check Crimp v0.1.0 signed release published on the Record](https://www.deimoscore.com/record/#claim-crimp-release-date) · SHA-256 of the Crimp v0.1.0 release tarball (crimp-v0.1.0.tar.gz) · a76f21d53944…38a6 · VERIFIED · as of 2026-10-18 · [Check SHA-256 of the Crimp v0.1.0 release tarball (crimp-v0.1.0.tar.gz) on the Record](https://www.deimoscore.com/record/#claim-crimp-release-sha256) · Crimp source licence · Apache-2.0 · VERIFIED · as of 2026-10-18 · [Check Crimp source licence on the Record](https://www.deimoscore.com/record/#claim-crimp-licence) · OpenSSF Best Practices project ID, Silver badge (self-certified) · 14613 · VERIFIED · as of 2026-10-20 · [Check OpenSSF Best Practices project ID, Silver badge (self-certified) on the Record](https://www.deimoscore.com/record/#claim-crimp-openssf) · Crimp patent status · Patent pending · PATENT PENDING · as of 2026-10-18 · [Check Crimp patent status on the Record](https://www.deimoscore.com/record/#claim-crimp-patent) · #### Marklode Fact · Value · Status · As of · Check · Public MCP registry entries counted · 156,111 · VERIFIED · as of 2026-10-17 · [Check Public MCP registry entries counted on the Record](https://www.deimoscore.com/record/#claim-marklode-registry-entries) · Distinct MCP servers behind those entries, after deduplication · 45,156 · VERIFIED · as of 2026-10-17 · [Check Distinct MCP servers behind those entries, after deduplication on the Record](https://www.deimoscore.com/record/#claim-marklode-servers) · MCP servers with no public source repository · 13,383 · VERIFIED · as of 2026-10-17 · [Check MCP servers with no public source repository on the Record](https://www.deimoscore.com/record/#claim-marklode-no-repo) · Share of MCP servers with no public source repository · 29.6% · VERIFIED · as of 2026-10-17 · [Check Share of MCP servers with no public source repository on the Record](https://www.deimoscore.com/record/#claim-marklode-no-repo-share) · Marklode report turnaround, by package · 24 to 72 hours · VERIFIED · as of 2026-10-18 · [Check Marklode report turnaround, by package on the Record](https://www.deimoscore.com/record/#claim-marklode-turnaround) · #### Clockford™ Fact · Value · Status · As of · Check · Clockford™ private beta opens, at midnight Pacific · Nov 10th, 2026 · SCHEDULED · as of 2026-10-18 · [Check Clockford™ private beta opens, at midnight Pacific on the Record](https://www.deimoscore.com/record/#claim-clockford-beta-opens) · Founding Startup seats in the first wave · 10 · SCHEDULED · as of 2026-10-18 · [Check Founding Startup seats in the first wave on the Record](https://www.deimoscore.com/record/#claim-clockford-founding-seats) · Team size (people) for a Founding Startup, US-based, already running an AI agent · 2 to 20 · VERIFIED · as of 2026-10-18 · [Check Team size (people) for a Founding Startup, US-based, already running an AI agent on the Record](https://www.deimoscore.com/record/#claim-clockford-team-size) · Founder feedback time asked of a Founding Startup · about 20 minutes a week · VERIFIED · as of 2026-10-18 · [Check Founder feedback time asked of a Founding Startup on the Record](https://www.deimoscore.com/record/#claim-clockford-feedback-time) · Clockford™ patent status · Patent pending · PATENT PENDING · as of 2026-10-18 · [Check Clockford™ patent status on the Record](https://www.deimoscore.com/record/#claim-clockford-patent) · #### The Lab Fact · Value · Status · As of · Check · Project Vessel, NeuroPhonics Module 1 and the Pastel Series released from the Lab to their own pages · 2026-10-18 · VERIFIED · as of 2026-10-18 · [Check Project Vessel, NeuroPhonics Module 1 and the Pastel Series released from the Lab to their own pages on the Record](https://www.deimoscore.com/record/#claim-lab-release-date) · Files still sealed in the Lab, unnamed · four · SEALED · as of 2026-10-19 · [Check Files still sealed in the Lab, unnamed on the Record](https://www.deimoscore.com/record/#claim-lab-sealed-files) · Vessel validation status · Thresholds reasoned, not yet measured; not yet tested against adjudicated cases · UNPROVEN · as of 2026-10-18 · [Check Vessel validation status on the Record](https://www.deimoscore.com/record/#claim-vessel-validation) · #### The instruments and their status - [Clockford™](https://www.deimoscore.com/clockford/) OVERSIGHT SCHEDULED - [Ratchet](https://www.deimoscore.com/ratchet/) ONCE LIVE - [Crimp](https://www.deimoscore.com/crimp/) ACCOUNTABLE OPEN SOURCE - [Marklode](https://www.deimoscore.com/marklode/) RECON LIVE - [M.A.X](https://www.deimoscore.com/max/) BASELINE IN THE LAB - [Project Vessel](https://www.deimoscore.com/vessel/) LOOKOUT IN THE LAB - [The Pastel Series](https://www.deimoscore.com/pastel/) CRITERIA RESEARCH - [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/) RESONANCE SIMULATION - [The Lab](https://www.deimoscore.com/lab/) SEALED SEALED How to write each name, and the words we don’t use about our own work: [Spelled our way](https://www.deimoscore.com/brand/#names). §04 / Press kit ### Files, ready to use. Every file downloads straight from this site; sizes are measured when the site is built. How to write our names, the colours and the type are on [Brand & press](https://www.deimoscore.com/brand/). Boilerplate Short (60 words) and long (119 words), with copy buttons, on the brand page. [Copy it there →](https://www.deimoscore.com/brand/#boilerplate) The mark A tetrahedron seen apex-on, in silver, for dark grounds. The ring of signal colour is on the press plates. - [The mark, The mark, silver, SVG](https://www.deimoscore.com/assets/deimos.svg) 292 × 305 · SVG · 2 KB The wordmark DEIMOS, drawn, not typed. - [The wordmark, The wordmark](https://www.deimoscore.com/assets/wordmark.svg) 730 × 79 · SVG · 4 KB The square mark The mark on its own ground, for avatars and lists. - [The square mark, Square mark](https://www.deimoscore.com/og/logo.png) 512 × 512 px · PNG · 128 KB Press plates The mark beside the wordmark, the motto and the line “Mission control for the age of AI agents. Defence only.” - [Press plates, Dark, SVG](https://www.deimoscore.com/assets/art/brand/press-plate-dark.svg) 1600 × 900 · SVG · 36 KB - [Press plates, Dark, WebP](https://www.deimoscore.com/assets/art/brand/press-plate-dark.webp) 2400 × 1350 px · WEBP · 61 KB - [Press plates, Paper, SVG](https://www.deimoscore.com/assets/art/brand/press-plate-paper.svg) 1600 × 900 · SVG · 36 KB - [Press plates, Paper, WebP](https://www.deimoscore.com/assets/art/brand/press-plate-paper.webp) 2400 × 1350 px · WEBP · 70 KB DWG DM-001 The mark as an engineering drawing: front view, side elevation and axonometric, with its title block. - [DWG DM-001, Dark, SVG](https://www.deimoscore.com/assets/art/brand/mark-drawing-dark.svg) 1200 × 860 · SVG · 43 KB - [DWG DM-001, Paper, SVG (print)](https://www.deimoscore.com/assets/art/brand/mark-drawing-paper.svg) 1200 × 860 · SVG · 43 KB Mission patches One family, one frame: the instrument’s name on top, its code word below, its lamp on the rim. - [Mission patches, Clockford (OVERSIGHT)](https://www.deimoscore.com/assets/patches/emblem-clockford-a949d5af04.svg) 400 × 400 · SVG · 3 KB - [Mission patches, Ratchet (ONCE)](https://www.deimoscore.com/assets/patches/patch-ratchet.svg) 400 × 400 · SVG · 4 KB - [Mission patches, Crimp (ACCOUNTABLE)](https://www.deimoscore.com/assets/patches/patch-crimp.svg) 400 × 400 · SVG · 4 KB - [Mission patches, Marklode (RECON)](https://www.deimoscore.com/assets/patches/patch-marklode.svg) 400 × 400 · SVG · 4 KB - [Mission patches, M.A.X (BASELINE)](https://www.deimoscore.com/assets/patches/patch-max.svg) 400 × 400 · SVG · 4 KB - [Mission patches, Vessel (LOOKOUT)](https://www.deimoscore.com/assets/patches/emblem-vessel-dfe54989fb.svg) 400 × 400 · SVG · 2 KB - [Mission patches, Pastel Series (CRITERIA)](https://www.deimoscore.com/assets/patches/emblem-pastel-07345ccaef.svg) 400 × 400 · SVG · 2 KB - [Mission patches, NeuroPhonics (RESONANCE)](https://www.deimoscore.com/assets/patches/emblem-neurophonics-7d65e7c50b.svg) 400 × 400 · SVG · 2 KB - [Mission patches, The Lab (SEALED)](https://www.deimoscore.com/assets/patches/emblem-lab-7aac040cc8.svg) 400 × 400 · SVG · 2 KB Image pack Renders and captures of our own public pages. No other company’s logo is in frame. - [Image pack, The moon Deimos, rendered](https://www.deimoscore.com/assets/art/record/deimos-specimen-880.webp) 880 × 712 px · WEBP · 28 KB Credit: Deimos AI LLC; shape model P. C. Thomas (2000), NASA PDS Small Bodies Node. The outline is the model; surface detail is procedural - [Image pack, The census on deimoscore.com · NR-02](https://www.deimoscore.com/press/nr-02-marklode-census.png) 2400 × 1260 px · PNG · 152 KB Credit: Deimos AI LLC · capture of www.deimoscore.com/marklode/#census, 20 Oct 2026 build; figures as of 17 Oct 2026 - [Image pack, The Record’s seal, after pressing Verify · NR-01](https://www.deimoscore.com/press/nr-01-record-seal.png) 2400 × 1260 px · PNG · 539 KB Credit: Deimos AI LLC · capture of www.deimoscore.com/record/#verify after pressing Verify, 20 Oct 2026 build Free to use when writing about us; please keep the credit shown with each file. Colour and type The palette, the instrument lamps and the three typefaces, with their licences. [Colour →](https://www.deimoscore.com/brand/#colour) [Type →](https://www.deimoscore.com/brand/#type) --- # Deimos AI LLC publishes a signed public claims ledger URL: https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/ Updated: 2026-10-20T13:42:00Z NR-01 · Deimos AI LLC · California, USA · 2026-10-20 ## Deimos AI LLC publishes a signed public claims ledger. Deimos AI LLC now keeps its public claims in one signed ledger, each with its status, its source and the date it was last checked. Deimos AI LLC’s website now runs at www.deimoscore.com, and the apex domain, deimoscore.com, redirects there. The site is built around [the Record](https://www.deimoscore.com/record/): one public ledger of the company’s claims. Each entry in the ledger carries a value, a status, a named source, linked where one is public, and the date it was last checked. The Record defines its statuses in plain words: Verified, Live, Scheduled, In the lab, Simulation, Research, Unproven, Sealed and Patent pending. A product that has not been released says so. A result that has not been measured says so too. The changelog logs the ledger as [CL-05](https://www.deimoscore.com/record/#cl-05), dated 18 October 2026. On 19 October, release builds began signing it ([CL-08](https://www.deimoscore.com/record/#cl-08)). The exact bytes of [/data/claims.json](https://www.deimoscore.com/data/claims.json) are signed with Ed25519, the signature is published at [/data/claims.json.sig](https://www.deimoscore.com/data/claims.json.sig), and the public key is at [/.well-known/deimos-record.pub](https://www.deimoscore.com/.well-known/deimos-record.pub). The key’s fingerprint is edc2 af9f 8f57 f88d f399 7747 f653 940f a3ff f32e e6e7 5ed1 c7c4 3c2d ec0d cb3a. Anyone can check a copy in the browser, or with the commands on [the Record page](https://www.deimoscore.com/record/#verify). A new key will be logged in the changelog, but a changelog entry alone cannot vouch for a new key: compare the fingerprint through a channel you already trust. The changelog logs changes to public claims, numbered from CL-01, and is also published as an Atom feed at [/record/feed.xml](https://www.deimoscore.com/record/feed.xml). [Field Notes](https://www.deimoscore.com/field-notes/), dated essays with their sources in the margin, sit beside it. The Field Notes and the Newsroom now have Atom feeds of their own, at [/field-notes/feed.xml](https://www.deimoscore.com/field-notes/feed.xml) and [/newsroom/feed.xml](https://www.deimoscore.com/newsroom/feed.xml), and every page is listed at [/sitemap/](https://www.deimoscore.com/sitemap/). Questions about any claim can go to the company through [the contact page](https://www.deimoscore.com/contact/#company). ### Sources - [The Record](https://www.deimoscore.com/record/) - [CL-05, the ledger made public](https://www.deimoscore.com/record/#cl-05) - [CL-08, the ledger signed](https://www.deimoscore.com/record/#cl-08) - [The ledger](https://www.deimoscore.com/data/claims.json) - [The signature](https://www.deimoscore.com/data/claims.json.sig) - [The public key](https://www.deimoscore.com/.well-known/deimos-record.pub) - [How to verify, and the fingerprint](https://www.deimoscore.com/record/#verify) - [The changelog feed](https://www.deimoscore.com/record/feed.xml) ### Image pack The Record’s seal, after pressing Verify Credit: Deimos AI LLC · capture of www.deimoscore.com/record/#verify after pressing Verify, 20 Oct 2026 build · 2400 × 1260 px · PNG · 539 KB [Download The Record’s seal, after pressing Verify](https://www.deimoscore.com/press/nr-01-record-seal.png) Deimos AI LLC · Newsroom · NR-01 · 271 words [The Record · CL-05 →](https://www.deimoscore.com/record/#cl-05) [All items →](https://www.deimoscore.com/newsroom/) [Press kit →](https://www.deimoscore.com/newsroom/#press-kit) --- # Marklode’s October recount of the public MCP registry URL: https://www.deimoscore.com/newsroom/2026-10-20-the-october-mcp-registry-recount/ Updated: 2026-10-20T13:42:00Z NR-02 · Deimos AI LLC · California, USA · 2026-10-20 ## Marklode publishes its October recount of the public MCP registry. The recount found [156,111](https://www.deimoscore.com/record/#claim-marklode-registry-entries) registry entries behind [45,156](https://www.deimoscore.com/record/#claim-marklode-servers) distinct MCP servers; [29.6%](https://www.deimoscore.com/record/#claim-marklode-no-repo-share) of those servers list no public source repository. Marklode, the due-diligence instrument of Deimos AI LLC, published the recount on 17 October 2026. The recount found [156,111](https://www.deimoscore.com/record/#claim-marklode-registry-entries) public MCP registry entries. After deduplication, they come to [45,156](https://www.deimoscore.com/record/#claim-marklode-servers) distinct MCP servers: the same server listed under several versions, names or entries counts once. Of those servers, [13,383](https://www.deimoscore.com/record/#claim-marklode-no-repo), or [29.6%](https://www.deimoscore.com/record/#claim-marklode-no-repo-share), list no public source repository. The October figures supersede Marklode’s first census, taken in September 2026 and logged in the Record as [CL-01](https://www.deimoscore.com/record/#cl-01). The count reads metadata only. It is built from the public MCP registry API, and no MCP server is contacted, probed or pinged, either when the index is built or when someone queries it. A server with no public repository is not shown to be unsafe. It means a reader has no code to check. The count also says nothing about which servers are maintained or used. The live totals are published at [api.marklode.com/v1/stats](https://api.marklode.com/v1/stats). [Field Note 03](https://www.deimoscore.com/field-notes/mcp-servers-census/) sets out what the figures can and cannot support. Marklode says it recounts monthly; there have been two counts so far. ### The facts in this item · from the Record Each number is pinned as it stood when this item was published, 2026-10-20. The Record keeps the live value; if it moves, the row says so and this item’s text is not rewritten. - 156,111 Public MCP registry entries counted VERIFIED [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) as of 2026-10-17 [Check it: Public MCP registry entries counted, on the Record](https://www.deimoscore.com/record/#claim-marklode-registry-entries) - 45,156 Distinct MCP servers behind those entries, after deduplication VERIFIED [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) as of 2026-10-17 [Check it: Distinct MCP servers behind those entries, after deduplication, on the Record](https://www.deimoscore.com/record/#claim-marklode-servers) - 13,383 MCP servers with no public source repository VERIFIED [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) as of 2026-10-17 [Check it: MCP servers with no public source repository, on the Record](https://www.deimoscore.com/record/#claim-marklode-no-repo) - 29.6% Share of MCP servers with no public source repository VERIFIED [Marklode MCP registry census, October 2026 recount](https://api.marklode.com/v1/stats) as of 2026-10-17 [Check it: Share of MCP servers with no public source repository, on the Record](https://www.deimoscore.com/record/#claim-marklode-no-repo-share) ### Sources - [Live census totals and method ↗](https://api.marklode.com/v1/stats) - [Marklode ↗](https://marklode.com) - [The Record, CL-04 (the recount)](https://www.deimoscore.com/record/#cl-04) - [The Record, CL-01 (the first census)](https://www.deimoscore.com/record/#cl-01) - [Field Note 03](https://www.deimoscore.com/field-notes/mcp-servers-census/) ### Image pack The census on deimoscore.com Credit: Deimos AI LLC · capture of www.deimoscore.com/marklode/#census, 20 Oct 2026 build; figures as of 17 Oct 2026 · 2400 × 1260 px · PNG · 152 KB [Download The census on deimoscore.com](https://www.deimoscore.com/press/nr-02-marklode-census.png) Deimos AI LLC · Newsroom · NR-02 · 171 words [The Record · CL-04 →](https://www.deimoscore.com/record/#cl-04) [All items →](https://www.deimoscore.com/newsroom/) [Press kit →](https://www.deimoscore.com/newsroom/#press-kit) --- # Glossary · AI agent oversight terms, defined plainly URL: https://www.deimoscore.com/glossary/ Updated: 2026-10-20T13:42:00Z Glossary · Deimos AI LLC ## Glossary. The terms behind keeping AI agents in hand, defined plainly and the way we use them. Each one links to the instrument or note where it matters. [AI agent](https://www.deimoscore.com/glossary/#term-ai-agent) · Software that takes actions on someone’s behalf, usually with tools and credentials it was given: charging a card, shipping code, sending an email. The controls Deimos AI LLC builds keep a person in charge of what agents do.See [What Deimos AI does](https://www.deimoscore.com/#divisions) [Agent oversight](https://www.deimoscore.com/glossary/#term-agent-oversight) · Seeing what your AI agents are doing, approving what matters and being able to stop them. Clockford™ is built to give you that from your phone, whichever company built the agents.See [Clockford™](https://www.deimoscore.com/clockford/) [Human-in-the-loop approval](https://www.deimoscore.com/glossary/#term-human-in-the-loop-approval) · A step where an agent must get a person’s yes before an action that matters. Our first Flight Rule puts it plainly: an agent can propose anything, a person decides what can’t be undone.See [Flight Rules](https://www.deimoscore.com/#flight-rules) [Effect](https://www.deimoscore.com/glossary/#term-effect) · An action that leaves your system and can’t be taken back by simply trying again: a charge, a deploy, a published package, a sent email.See [Ratchet](https://www.deimoscore.com/ratchet/) [Effect gate](https://www.deimoscore.com/glossary/#term-effect-gate) · A checkpoint in front of an effect. The agent asks before acting, the gate keeps a durable record, and every retry gets the recorded answer instead of a second attempt. Ratchet is an effect gate: one call before acting, one after.See [Ratchet](https://www.deimoscore.com/ratchet/) [At most once](https://www.deimoscore.com/glossary/#term-at-most-once) · The promise that the same real-world action is started no more than once, however many times it is retried, restarted or raced. It is the strongest promise that can honestly be kept for an effect that leaves your system, so it is the one Ratchet makes.See [Field Note 01](https://www.deimoscore.com/field-notes/at-most-once/) [Idempotency key](https://www.deimoscore.com/glossary/#term-idempotency-key) · A unique key attached to an action so that repeats of it can be recognised as the same action. Ratchet keys every effect this way; only the first ask about a key is metered.See [Ratchet](https://www.deimoscore.com/ratchet/) [Indeterminate effect](https://www.deimoscore.com/glossary/#term-indeterminate-effect) · An effect whose outcome nobody can know, because the agent crashed after acting and before reporting. Ratchet marks it as a known unknown rather than guessing, and your policy decides: block, retry or check first.See [Ratchet](https://www.deimoscore.com/ratchet/) [Decision gate](https://www.deimoscore.com/glossary/#term-decision-gate) · A gate that makes a decision from a rule and facts, never from an agent’s own conclusion. Crimp is an open-source decision gate: the agent brings the rule and the facts, and Crimp works out the outcome.See [Crimp](https://www.deimoscore.com/crimp/) [Sealed rule](https://www.deimoscore.com/glossary/#term-sealed-rule) · A rule fixed before anyone knows which way the outcome will go, so it can’t be tuned after the fact. A sealed rule can be re-run against the same facts later and give the same answer.See [Crimp](https://www.deimoscore.com/crimp/) [Unknown never seals](https://www.deimoscore.com/glossary/#term-unknown-never-seals) · Crimp’s rule that a missing fact leaves a decision open. “We don’t know” never quietly becomes a no, or a yes.See [Field Note 02](https://www.deimoscore.com/field-notes/unknown-never-seals/) [Model Context Protocol (MCP)](https://www.deimoscore.com/glossary/#term-model-context-protocol) · An open protocol that lets AI agents call tools and data sources through servers. Ratchet speaks it, and Marklode counts the public registry of servers that implement it.See [Marklode](https://www.deimoscore.com/marklode/) [MCP server](https://www.deimoscore.com/glossary/#term-mcp-server) · A program that exposes tools or data to AI agents over the Model Context Protocol. Marklode’s October 2026 recount found 45,156 distinct servers behind 156,111 public registry entries.See [Field Note 03](https://www.deimoscore.com/field-notes/mcp-servers-census/) [MCP registry census](https://www.deimoscore.com/glossary/#term-mcp-registry-census) · Marklode’s monthly count of the public MCP registry: every listing, deduplicated into the servers behind it. Metadata only; no server is ever contacted, probed or pinged.See [Marklode](https://www.deimoscore.com/marklode/) [Startup due diligence](https://www.deimoscore.com/glossary/#term-startup-due-diligence) · Checking an idea before you raise money on it: who else does it, what got there first, the strongest attacks on it and what survives. Marklode delivers it in 24 to 72 hours, with every finding checked by a person.See [Marklode](https://www.deimoscore.com/marklode/) [Prior art](https://www.deimoscore.com/glossary/#term-prior-art) · Patents, papers and products that already disclose an idea. Marklode reports a prior-art landscape; it is not legal advice or a freedom-to-operate opinion.See [Marklode](https://www.deimoscore.com/marklode/) [Behavioural baseline](https://www.deimoscore.com/glossary/#term-behavioural-baseline) · What normal looks like for one person, set from the opening minutes of a recording. M.A.X measures change against that person’s own baseline, never against a stereotype, and it does not detect deception.See [Field Note 04](https://www.deimoscore.com/field-notes/why-max-does-not-detect-deception/) [Public-source early warning](https://www.deimoscore.com/glossary/#term-public-source-early-warning) · Surfacing public conversations that are escalating toward harm so a person can review them, with a link to every source post. It is how Project Vessel is described; it reads public posts only and profiles no one.See [Project Vessel](https://www.deimoscore.com/vessel/) [Protected-attributes firewall](https://www.deimoscore.com/glossary/#term-protected-attributes-firewall) · A safeguard in Vessel that keeps a person’s characteristics out of the evidence. Who someone is never counts toward a flag.See [Project Vessel](https://www.deimoscore.com/vessel/) [NOT ASSESSED](https://www.deimoscore.com/glossary/#term-not-assessed) · The answer Vessel gives when it can’t read content reliably, instead of a false all-clear.See [Project Vessel](https://www.deimoscore.com/vessel/) [Self-check gate](https://www.deimoscore.com/glossary/#term-self-check-gate) · In NeuroPhonics Module 1, a check that refuses to report when the model doesn’t fit or the signal-to-noise ratio is too low. Module 1 is a simulation on synthetic signals, for research only.See [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/) [Rainbow Series](https://www.deimoscore.com/glossary/#term-rainbow-series) · A set of US computer-security guidelines from the 1980s, known by the colours of their covers. The Pastel Series is our unpublished research revisiting those criteria for a world with agents inside.See [The Pastel Series](https://www.deimoscore.com/pastel/) [OpenSSF Best Practices badge](https://www.deimoscore.com/glossary/#term-openssf-best-practices-badge) · A badge from the Open Source Security Foundation for open-source projects that meet its published criteria, at passing, silver and gold levels. Projects certify themselves against the criteria, and their answers are public. Ratchet and Crimp hold self-certified Silver badges (projects 14440 and 14613).See [Security posture](https://www.deimoscore.com/security/) [Signed release](https://www.deimoscore.com/glossary/#term-signed-release) · A software release published with a signature and a checksum, so you can confirm it came from its maker and wasn’t altered. Crimp’s v0.1.0 release publishes a SHA-256 of a76f21d53944…38a6.See [Security posture](https://www.deimoscore.com/security/) [Patent pending](https://www.deimoscore.com/glossary/#term-patent-pending) · A patent application has been filed and not yet granted. Clockford™ and Crimp are patent pending under US provisional filings; we don’t publish application numbers.See [The Record](https://www.deimoscore.com/record/) [Ephemeris](https://www.deimoscore.com/glossary/#term-ephemeris) · A table of where a body in the sky is at given times. The live position of the moon Deimos on every page comes from NASA/JPL Horizons, body 402.See [Tonight’s Deimos](https://www.deimoscore.com/record/ephemeris/) [Flight Rules](https://www.deimoscore.com/glossary/#term-flight-rules) · The four rules every Deimos system answers to. FR-1: people stay in charge of what matters. FR-2: assume something is already inside. FR-3: if it matters, make it provable. FR-4: bend, don’t break.See [Flight Rules](https://www.deimoscore.com/#flight-rules) [Claims ledger](https://www.deimoscore.com/glossary/#term-claims-ledger) · The public list of the company’s claims, each with a status, a source and the date it was last checked.See [The Record](https://www.deimoscore.com/record/#ledger) --- # About Deimos AI LLC · Keeping people in charge of AI agents URL: https://www.deimoscore.com/company/ Updated: 2026-10-20T13:42:00Z The Company · Deimos AI LLC ## We build the instruments that keep people in charge of AI agents. Deimos AI LLC is a software company. Our instruments let a person see what their AI agents are doing, approve what matters before it happens, stop an agent at any point, and prove afterwards what took place. Defence only. Founded 2026 Software Defence only Open source: Ratchet · Crimp Document CO-0 · Company facts · Deimos AI LLC · Rev B · 2026-10-20 ### At a glance. Legal name · Deimos AI LLC Founded · 2026 Source · [Deimos AI public GitHub profile](https://github.com/thearchitect0x-glitch) · as of 2026-10-18 What we make · Software that keeps people in charge of AI agents: an oversight app, an effect gate, a decision gate, and startup due diligence that a person signs off. Live today · [Ratchet](https://www.deimoscore.com/ratchet/), a hosted effect gate with a free plan of 1,000 gated effects a month; [Marklode](https://www.deimoscore.com/marklode/), due diligence in 24 to 72 hours. Open source · [Ratchet](https://www.deimoscore.com/ratchet/) and [Crimp](https://www.deimoscore.com/crimp/), under Apache-2.0. Both hold a self-certified OpenSSF Best Practices Silver badge. Source · [OpenSSF Best Practices, projects 14440 and 14613](https://www.bestpractices.dev/projects/14440) · as of 2026-10-20 Next · [Clockford™](https://www.deimoscore.com/clockford/) private beta opens Nov 10th, 2026, with 10 founding seats. Stance · Defence only. Money never buys a score. Our claims carry their source and the date we checked them, on [the Record](https://www.deimoscore.com/record/). The company signs its work. Find us · [LinkedIn ↗](https://www.linkedin.com/company/deimoshq/) · [GitHub ↗](https://github.com/thearchitect0x-glitch) · [Open a channel](https://www.deimoscore.com/contact/) On the record §02 / Crew ### A small crew. A long watch. Deimos AI LLC was founded in 2026, and the company signs its work. We build with AI every day and check its work every day: independent review, red-team drills, and nothing ships on a claim we can’t prove. Capabilities, in brief Oversight of AI agents · Seeing, approving and stopping agents from any vendor, with a person in the loop for what matters. Effect gating · Starting a retried action at most once, budgets an agent can’t raise, and an honest indeterminate when nobody can know. Decision gating · Rules sealed before the outcome is known, facts watched after, decisions that withdraw themselves. Evidence for people · Due diligence with every source linked and every finding checked by a person; a census of the public MCP registry from metadata only. Research · Offline-first video analysis, public-source early warning and signal-processing simulation, each in the lab until measured. §03 / How it fits together ### One company. Three voices. - 01 · The company Deimos speaks. One company sets the rules every instrument answers to: the four Flight Rules, defence only, and nothing claimed that can’t be checked. - 02 · The instruments The instruments act. Nine instruments in three divisions, each built for one job: see the agent, gate the action, check the decision, put the facts in front of a person. - 03 · The record The record proves. Our claims are entered in [the Record](https://www.deimoscore.com/record/), each with its status, its source and the date it was last checked. When a claim changes, the change is logged. §04 / The instruments ### What exists, and how far along it is. A status is a promise about evidence. Live means you can use it today. In the lab means built or being built, and not released. Research means paper work. Sealed means not named. Instrument Division What it is Status Where [Clockford™](https://www.deimoscore.com/clockford/) OVERSIGHT I · Control See, approve and stop your AI agents from your phone, whichever company built them. SCHEDULED [clockford.com ↗](https://clockford.com) [Ratchet](https://www.deimoscore.com/ratchet/) ONCE I · Control The effect gate for AI agents. A retried charge, deploy or email happens at most once. LIVE [ratchetgate.com ↗](https://ratchetgate.com) [Crimp](https://www.deimoscore.com/crimp/) ACCOUNTABLE I · Control An open-source decision gate. The rule is sealed before the outcome is known; when a fact breaks, the decision withdraws itself. OPEN SOURCE [GitHub ↗](https://github.com/thearchitect0x-glitch/crimp) [Marklode](https://www.deimoscore.com/marklode/) RECON II · Evidence Startup due diligence before the pitch: competitors, prior art, the hardest attacks, and a verdict. LIVE [marklode.com ↗](https://marklode.com) [M.A.X](https://www.deimoscore.com/max/) BASELINE II · Evidence Offline-first analysis of video you already have, each person against their own baseline. IN THE LAB Not released [Project Vessel](https://www.deimoscore.com/vessel/) LOOKOUT II · Evidence Public-source early warning, reviewed by people. It surfaces; a person decides. IN THE LAB Not released [The Pastel Series](https://www.deimoscore.com/pastel/) CRITERIA III · Research Revisiting classic security criteria for a world where the actor may be a person or an AI agent already inside. RESEARCH Not released [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/) RESONANCE III · Research Find a faint resonance in noise. Refuse when you can’t. A signal-processing simulation. SIMULATION Not released [The Lab](https://www.deimoscore.com/lab/) SEALED III · Research Files under seal. Each is released to its own page when it can stand on its own. SEALED Sealed §05 / Mission log ### The watch, so far. - 2026 #### Ratchet’s effect gate goes live. A hosted gate with a free plan and an MCP server, [ratchet-mcp on npm ↗](https://www.npmjs.com/package/ratchet-mcp). - 2026 · Sep 12 #### Marklode’s first census of the public MCP registry. 31,309 servers behind 101,219 registry entries, from the registry APIs. Metadata only; no server contacted. Superseded by the October recount below. - 2026 · Sep 13 #### Crimp v0.1.0, signed and open source. The release carries a Sigstore attestation you can check with one command. [See it decide →](https://www.deimoscore.com/crimp/#chain) - 2026 · Oct 17 #### Clockford™ opens 10 founding seats. For US startups of 2 to 20 people already running an AI agent. [The founding brief ↗](https://clockford.com/founding/) - 2026 · Oct 17 #### The census, recounted. 45,156 servers behind 156,111 entries; 29.6% have no public source repository. [What the count tells you →](https://www.deimoscore.com/field-notes/mcp-servers-census/) - 2026 · Oct 18 #### Three files leave the Lab. [Project Vessel](https://www.deimoscore.com/vessel/), [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/) and [the Pastel Series](https://www.deimoscore.com/pastel/) get their own pages; the other four stay sealed. - 2026 · Nov 10 #### Clockford™ private beta. Scheduled Midnight Pacific. §06 / How we work ### Four words. Four rules. - Seen. You can see what every agent is doing, right now, whichever company built it. - Approved. Nothing that matters happens without your yes. - Stoppable. One gate in front of every action that can’t be taken back. - Provable. If it matters, there is a record you can check. - FR-1 People stay in charge of what matters. - FR-2 Assume something is already inside. - FR-3 If it matters, make it provable. - FR-4 Bend, don’t break. Unknown never quietly becomes yes, and never quietly becomes no. [Read the Flight Rules on paper →](https://www.deimoscore.com/#flight-rules) [How we secure what we build →](https://www.deimoscore.com/security/) §07 / This site ### Built to be checked. Hosting Cloudflare Pages Static files, built from source and served by Cloudflare Pages. No server of ours runs behind this page. Cookies 0 Set by this site. There is nothing to consent to. [Privacy](https://www.deimoscore.com/privacy/) Third-party requests 0 Fonts, scripts and images all come from this site. [Check the headers](https://www.deimoscore.com/security/) Custodimus We keep watch ### Open a channel. Building with agents, writing about them, or checking our claims? Every route reaches the people who build the instruments. [Open a channel →](https://www.deimoscore.com/contact/) [Brand & press](https://www.deimoscore.com/brand/) [Read the Record](https://www.deimoscore.com/record/) --- # Contact Deimos AI LLC · Instruments, security and press URL: https://www.deimoscore.com/contact/ Updated: 2026-10-20T13:42:00Z Contact · Deimos AI LLC ## Open a channel. Pick the line that matches what you need. Each one reaches the people who build the instruments, not a sales queue. §01 / The switchboard ### Five lines. Each one answered. - Line 01 #### Use an instrument Start where the instrument lives. Each site has its own sign-up and its own terms. - [Ratchet Create a free workspace · ratchetgate.com ↗](https://ratchetgate.com) - [Marklode Brief a report · marklode.com ↗](https://marklode.com) - [Clockford™ Ask for a founding seat · clockford.com ↗](https://clockford.com/founding/) - [Crimp Read and run the source · GitHub ↗](https://github.com/thearchitect0x-glitch/crimp) - Line 02 #### Report a vulnerability Private reporting is switched on for both open-source repositories. Please don’t open a public issue. - [Ratchet Private advisory on GitHub ↗](https://github.com/thearchitect0x-glitch/ratchet/security/advisories/new) - [Crimp Private advisory on GitHub ↗](https://github.com/thearchitect0x-glitch/crimp/security/advisories/new) - [security.txt Our disclosure contacts, machine-readable](https://www.deimoscore.com/.well-known/security.txt) - [Anything else How to reach us about this site or another instrument](https://www.deimoscore.com/security/#report) - Line 03 #### Talk to the company Partnerships, pilots, questions about a claim on this site. - [LinkedIn Message Deimos AI LLC ↗](https://www.linkedin.com/company/deimoshq/) - [Check a claim first Each claim, its source and its date](https://www.deimoscore.com/record/) - Line 04 #### Press and writers Names, boilerplate, the mark and the colours, ready to use. - [Message us LinkedIn · Deimos AI LLC ↗](https://www.linkedin.com/company/deimoshq/) - [Newsroom Dated announcements, the fact sheet and the press kit](https://www.deimoscore.com/newsroom/) - [Brand & press The kit, and how to write our names](https://www.deimoscore.com/brand/) - [Field Notes Dated essays, sources in the margin](https://www.deimoscore.com/field-notes/) - Line 05 #### Follow the build What leaves the Lab, when it leaves, and what we learned. - [LinkedIn Company updates ↗](https://www.linkedin.com/company/deimoshq/) - [GitHub Source and releases ↗](https://github.com/thearchitect0x-glitch) - [The changelog When a claim changes, it is logged](https://www.deimoscore.com/record/#changelog) #### What this page never does - It has no form, so nothing you type here is collected. - It sets no cookies and loads nothing from anyone else. - It never adds you to a mailing list. Messages you send on LinkedIn or GitHub are handled under their terms. --- # Deimos AI LLC press kit · Boilerplate, names, mark, colours URL: https://www.deimoscore.com/brand/ Updated: 2026-10-20T13:42:00Z Brand & press · Deimos AI LLC ## Writing about us? Start here. The boilerplate, the names spelled the way we spell them, the mark, the colours and the typefaces. Facts come from [the Record](https://www.deimoscore.com/record/), where each one has a source and a date. §01 / Boilerplate ### About Deimos AI LLC. Short · 60 words Deimos AI LLC builds software that keeps people in charge of their AI agents: seen, approved, stoppable and provable. Its instruments include Ratchet, a live effect gate; Crimp, an open-source decision gate; Marklode, startup due diligence checked by a person; and Clockford™, whose private beta opens Nov 10th, 2026. It publishes a dated, sourced ledger of its claims. Defence only. Long · 119 words Deimos AI LLC (California, USA), founded in 2026, builds software that keeps people in charge of AI agents: seen, approved, stoppable and provable. Its instruments sit in three divisions. Control: Clockford™, an app to see, approve and stop AI agents from a phone, whose private beta opens Nov 10th, 2026; Ratchet, a live effect gate that starts a retried charge, deploy or email at most once; and Crimp, an open-source decision gate whose decisions withdraw themselves when a fact breaks. Evidence: Marklode, startup due diligence checked by a person. Research: files from the Lab, each published with its status. Ratchet and Crimp hold self-certified OpenSSF Best Practices Silver badges. The Record lists its claims, each with source and date. §02 / Names ### Spelled our way. Write In one line Please don’t say Deimos AI LLC in full the first time; Deimos AI after Builds the instruments that keep people in charge of AI agents. a weapons company, a surveillance company Clockford™ with ™ the first time See, approve and stop your AI agents from your phone. a game, a metaverse, AI employees Ratchet The effect gate for AI agents: a retried action is started at most once. exactly once, never twice Crimp An open-source decision gate. Unknown never seals. an AI that decides Marklode one word Startup due diligence before the pitch, checked by a person. legal, patent or investment advice M.A.X with the points, no final point Each person measured against their own baseline. It shows where to look. lie detector, detects deception Project Vessel Vessel after Public-source early warning, reviewed by people. surveillance, predicts behaviour The Pastel Series Research in progress re-reading the Rainbow Series criteria. a new standard, NSA-endorsed NeuroPhonics Module 1 A signal-processing simulation that refuses when it can’t be sure. a medical device, a diagnostic §03 / The mark ### A tetrahedron, seen apex-on. An instrument, not a weapon: three nodes, three edges to a core, and the one ring of signal colour we allow ourselves. The wordmark is drawn, not typed. The mark · SVG [Download ↓](https://www.deimoscore.com/assets/deimos.svg) The wordmark · SVG [Download ↓](https://www.deimoscore.com/assets/wordmark.svg) Square · PNG 512 px [Download ↓](https://www.deimoscore.com/og/logo.png) - Use the files as supplied. Don’t recolour, stretch, outline or add effects. - The mark is drawn for dark grounds. Give it room: at least the width of one node on every side. - Never set it beside government seals or marking language. We are not affiliated with any agency. - Other companies’ logos never sit next to ours. Model families appear as plain text. DWG DM-001. The mark as an engineering drawing: the front view as published, a side elevation and an axonometric of the ideal tetrahedron, with its title block. Drawing · Deimos AI LLC. Download · [dark SVG](https://www.deimoscore.com/assets/art/brand/mark-drawing-dark.svg) · [paper SVG (print)](https://www.deimoscore.com/assets/art/brand/mark-drawing-paper.svg) §04 / Colour ### Black, ivory, paper and rust. Colour is rationed to lamps. - Void #040507 Page - Hull #0A0C10 Panels - Ivory #F2F0EA Text, primary buttons - Dim #B3B7BF Body text - Mute #7A808A Labels - Paper #E8E4D8 Documents - Ink #16140F Text on paper - Stamp #B3261E Stamps on paper - Rust #C1440E Mars Instrument lamps · one per instrument, used for its code word, its key line and its primary button - Clockford #E8B53A OVERSIGHT - Ratchet #4BE08A ONCE - Crimp #F04BC4 ACCOUNTABLE - Marklode #2FD3E8 RECON - M.A.X #FF8A3D BASELINE - Vessel #9B87FF LOOKOUT - Pastel Series #DCCDF2 CRITERIA - NeuroPhonics #5AA9FF RESONANCE - The Lab #F0473A SEALED §05 / Type ### Three voices, three faces. The company speaks in an expanded grotesque, the instruments act in the same family at working width, and the record proves in a ledger mono. All three families are published under the SIL Open Font License 1.1, installed from Fontsource and served from this site. Measured before it’s claimed. Archivo Expanded the voice: headlines, figures, statements · 300 / 400 at 125 % and 112 % width · © The Archivo Project Authors (Omnibus-Type), SIL OFL 1.1 Ask. Act. Report. Archivo & Archivo Narrow the instruments: interface, body, code words, buttons · 400 / 500 / 600 · © The Archivo Project Authors (Omnibus-Type), SIL OFL 1.1 RA 08ʰ54ᵐ · DEC +18°45′ · VERIFIED DM Mono the record hand: labels, data, chips, sources · 400 / 500 · © The DM Mono Project Authors, SIL OFL 1.1 The scale · measured from this page by your browser display-xl We keep watch. display-l Whose shoulders. display-m Spelled our way. lead Every claim carries its source. longform Measured before it’s claimed. codeword Custodimus label Public record data Source linked · as of today §06 / Mission patches ### One family, nine instruments. Every instrument wears a patch in the same frame: its name on top, its code word below, its lamp colour on the rim. Clockford™ OVERSIGHT Ratchet ONCE Crimp ACCOUNTABLE Marklode RECON M.A.X BASELINE Project Vessel LOOKOUT The Pastel Series CRITERIA NeuroPhonics Module 1 RESONANCE The Lab SEALED Press Questions, interviews, a claim to check ### Need something that isn’t here? Ask. If a number you want to print isn’t in the Record, we would rather tell you we can’t prove it yet than give you one we can’t. [Open a channel →](https://www.deimoscore.com/contact/) [Newsroom and fact sheet](https://www.deimoscore.com/newsroom/#fact-sheet) [Read the Record](https://www.deimoscore.com/record/) --- # Privacy · No cookies, no analytics, one opt-in request · Deimos AI URL: https://www.deimoscore.com/privacy/ Updated: 2026-10-20T05:49:07Z Privacy · Deimos AI LLC ## We don’t collect it, so we can’t lose it. This website sets no cookies, runs no analytics scripts, has no sign-up or contact forms and loads nothing from anyone else. One thing can leave it, and only when you ask: when you press Check in the Marklode checker, the server name you typed goes to Marklode, a Deimos AI LLC service, whose host keeps a short-lived log of that request (clause 05). Two display preferences can be saved, and they stay in your own browser. Below is the whole notice, and a panel that checks it against your browser right now. §01 / Check it now ### Don’t trust the notice. Check it. Your browser reports what this page has stored and fetched since it loaded. Nothing here is sent anywhere. Cookies on this site 0 None set. There is nothing to consent to. Requests from this page to other sites 0 Every font, script, image and data file on this page came from this site. Saved in your browser 0 No preferences saved. Checked when this page loaded. Without JavaScript the panel can’t look, so it shows what the site is built to do: zero, zero, zero. The panel reads this page only. The one request anywhere on this site that goes to another address is the Marklode checker’s, to api.marklode.com, sent when you press Check on [/marklode/](https://www.deimoscore.com/marklode/#check). That page counts it beside the button and in its footer. Clauses [01 · Who this covers](https://www.deimoscore.com/privacy/#p1) [02 · What we collect through this site](https://www.deimoscore.com/privacy/#p2) [03 · What your browser keeps](https://www.deimoscore.com/privacy/#p3) [04 · What any web request carries](https://www.deimoscore.com/privacy/#p4) [05 · The Marklode checker](https://www.deimoscore.com/privacy/#p5) [06 · Files this site fetches](https://www.deimoscore.com/privacy/#p6) [07 · Links to other sites](https://www.deimoscore.com/privacy/#p7) [08 · Children](https://www.deimoscore.com/privacy/#p8) [09 · Changes](https://www.deimoscore.com/privacy/#p9) [10 · Questions](https://www.deimoscore.com/privacy/#p10) Document P-0 · Privacy notice · Deimos AI LLC · Rev B · in force 2026-10-19 ### The notice, in full. - #### Who this covers This notice covers the Deimos AI LLC website: the pages under this address. Our instruments that run on their own sites (Ratchet, Marklode and Clockford™) have their own privacy terms, published on those sites. - #### What we collect through this site Nothing about you, unless you use the Marklode checker: when you press Check, the request reaches Marklode’s API host, Fly.io, which logs it for a short time with the server name you typed and network details such as your IP address (clause 05). The site has no accounts, no sign-up or contact forms, no comments, no newsletter and no analytics or advertising scripts. It sets no cookies. - #### What your browser keeps If you use the Motion or Sound switches at the top of the page, your browser remembers the choice in its local storage under two keys, deimos.motion and deimos.sound. They never leave your device, we can’t read them, and you can clear them with the button above or your browser’s site settings. - #### What any web request carries The site is served by Cloudflare Pages. As with any website, your browser’s requests reach Cloudflare’s servers with the technical details every request carries, such as your IP address, your browser’s user agent and the page asked for. Cloudflare processes them to deliver the pages and protect the site from abuse, under [Cloudflare’s privacy policy ↗](https://www.cloudflare.com/privacypolicy/). We don’t add tracking of our own on top. - #### The Marklode checker The [Marklode page](https://www.deimoscore.com/marklode/#check) has a checker that asks whether an MCP server is listed in the official MCP registry. Nothing is sent while you type. When you press Check, your browser sends the server name you typed to Marklode’s API at api.marklode.com. Marklode is a service of Deimos AI LLC. That name is the only thing you type that ever leaves this site, and it goes only to us and to Fly.io, which hosts the API and keeps short-lived request logs for operations: the time, the path asked for (which includes the name) and network details (section 06 of [Marklode’s privacy policy ↗](https://marklode.com/privacy)). Like any web request, the request also carries your IP address, your browser’s user agent and this site’s address as its origin; it sends no cookies and doesn’t say which page you were on. This site keeps neither the name nor the answer: both are gone when you leave the page. If the page can’t read the answer, it offers a link that opens Marklode’s raw answer on api.marklode.com in a new tab, which sends the same name to the same place. - #### Files this site fetches A few pages fetch data files from this same site while you read: tonight’s position of the moon Deimos ([/data/deimos.json](https://www.deimoscore.com/data/deimos.json)), the NeuroPhonics simulation’s output, the published Ratchet run that the [Ratchet page](https://www.deimoscore.com/ratchet/) replays ([/data/ratchet-run.json](https://www.deimoscore.com/data/ratchet-run.json)), and, on the Security page, this page’s own response headers. On [the Record](https://www.deimoscore.com/record/#verify), only when you press Verify, your browser fetches the claims ledger ([/data/claims.json](https://www.deimoscore.com/data/claims.json)), its signature and our public key, and, in browsers without Ed25519 built in, a verification script, all from this site. Those requests go only to us and carry nothing about you beyond what any request carries. - #### Links to other sites Links marked ↗ leave this site, for example to LinkedIn, GitHub or an instrument’s own site. Those sites have their own policies. If you write to us there, your message is handled under their terms as well as ours. - #### Children This site is written for people who build and run software. It isn’t aimed at children. - #### Changes If this notice changes, the new revision gets a new letter and date at the top, and the change is logged in [the Record’s changelog](https://www.deimoscore.com/record/#changelog). - #### Questions Ask us through any line on the [contact page](https://www.deimoscore.com/contact/). In force 2026-10-19 --- # Terms of use · Deimos AI LLC website, licences and marks URL: https://www.deimoscore.com/terms/ Updated: 2026-10-19T22:36:22Z Terms of use · Deimos AI LLC ## Plain terms. These terms cover reading and using this website. Each instrument that you can sign up for has its own terms on its own site, and those govern the instrument. Clauses [01 · Using this site](https://www.deimoscore.com/terms/#t1) [02 · What the information is](https://www.deimoscore.com/terms/#t2) [03 · The instruments](https://www.deimoscore.com/terms/#t3) [04 · Open source](https://www.deimoscore.com/terms/#t4) [05 · Names and marks](https://www.deimoscore.com/terms/#t5) [06 · Data and imagery](https://www.deimoscore.com/terms/#t6) [07 · Links](https://www.deimoscore.com/terms/#t7) [08 · No warranty](https://www.deimoscore.com/terms/#t8) [09 · Changes](https://www.deimoscore.com/terms/#t9) [10 · Contact](https://www.deimoscore.com/terms/#t10) Document T-0 · Terms of use · Deimos AI LLC · Rev A · in force 2026-10-18 ### The terms, in full. - #### Using this site You may read, link to, quote and share anything on this site. Please don’t try to break it, overload it, or use it to attack anyone else. If you find a weakness, tell us instead: see [Security](https://www.deimoscore.com/security/#report). - #### What the information is This site describes what Deimos AI LLC builds and how far along each piece is. Each claim carries a status, a source and the date we last checked it, and [the Record](https://www.deimoscore.com/record/) lists them all. Statuses mean what they say: a simulation makes no real-world claim, in the lab means not released, and research means unpublished work. Nothing here is legal, financial, medical or investment advice. - #### The instruments Ratchet, Marklode and Clockford™ run on their own sites (ratchetgate.com, marklode.com, clockford.com) under their own terms and pricing. If you use one of them, its terms apply to that use, not these. - #### Open source Ratchet and Crimp are published under the Apache License 2.0. The licence in each repository governs the code, and it allows use, change and redistribution under its conditions. Crimp is patent pending; its code stays open under that licence. - #### Names and marks Deimos AI LLC, the Deimos mark, the instrument names and the mission patches belong to Deimos AI LLC. Clockford™ is a trademark of Deimos AI LLC. You may use the names to refer to us and our work, as described on the [brand page](https://www.deimoscore.com/brand/), but not in a way that suggests we endorse you or that you speak for us. - #### Data and imagery from others The moon’s position comes from NASA/JPL Horizons. The Mars imagery is from NASA/JPL and Caltech, from Viking images processed by the USGS. The Deimos shape model is by P. C. Thomas, via the NASA Planetary Data System. Credits are in [the Record](https://www.deimoscore.com/record/). Deimos AI LLC is not affiliated with NASA, JPL, the NSA or any government agency. - #### Links Links marked ↗ go to sites we don’t control. We link to them because they hold evidence or a service we describe; we aren’t responsible for what they publish. - #### No warranty We work to keep every page accurate and dated, and we log corrections. Even so, the site is provided as it is, without warranties of any kind, and to the extent the law allows, Deimos AI LLC is not liable for losses that come from relying on it. - #### Changes If these terms change, the new revision gets a new letter and date at the top, and the change is logged in [the Record’s changelog](https://www.deimoscore.com/record/#changelog). - #### Contact Questions about these terms: any line on the [contact page](https://www.deimoscore.com/contact/). In force 2026-10-18 --- # Legal · Policies, licences, marks and patents · Deimos AI URL: https://www.deimoscore.com/legal/ Updated: 2026-10-20T03:08:24Z Legal · Deimos AI LLC ## Legal, in one place. Who publishes this site, which terms govern what, how our code is licensed and how our names may be used. An instrument with a site of its own is governed by that site. Clauses [01 · The company](https://www.deimoscore.com/legal/#lg1) [02 · Instruments on their own sites](https://www.deimoscore.com/legal/#lg2) [03 · Open-source licences](https://www.deimoscore.com/legal/#lg3) [04 · Trademarks](https://www.deimoscore.com/legal/#lg4) [05 · Patents](https://www.deimoscore.com/legal/#lg5) [06 · Cookies and storage](https://www.deimoscore.com/legal/#lg6) [07 · Legal questions](https://www.deimoscore.com/legal/#lg7) [08 · Changes](https://www.deimoscore.com/legal/#lg8) Document LG-0 · Legal · Deimos AI LLC · Rev A · in force 2026-10-19 ### Every policy, licence and mark. - #### The company This website is published by Deimos AI LLC, California, USA. Three documents cover the site itself. Privacy · [Privacy notice](https://www.deimoscore.com/privacy/) Document P-0 · what this site collects, and a panel that checks it Terms · [Terms of use](https://www.deimoscore.com/terms/) Document T-0 · reading and using this site Security · [Security and vulnerability disclosure](https://www.deimoscore.com/security/) How to report a weakness · contacts in [/.well-known/security.txt](https://www.deimoscore.com/.well-known/security.txt) - #### Instruments on their own sites Each instrument that runs on a site of its own is governed by that site’s terms and notices, not by this site’s. We link to them here; we don’t restate them. Ratchet · Terms [ratchetgate.com/terms ↗](https://ratchetgate.com/terms) Privacy [ratchetgate.com/privacy ↗](https://ratchetgate.com/privacy) Security [ratchetgate.com/security ↗](https://ratchetgate.com/security) Marklode · Terms [marklode.com/terms ↗](https://marklode.com/terms) Privacy [marklode.com/privacy ↗](https://marklode.com/privacy) Mutual NDA · PDF [marklode.com/legal/marklode-mutual-nda.pdf ↗](https://marklode.com/legal/marklode-mutual-nda.pdf) Clockford™ · Terms [clockford.com/terms ↗](https://clockford.com/terms/) Privacy [clockford.com/privacy ↗](https://clockford.com/privacy/) These cover the site. The private beta, opening Nov 10th, 2026, publishes its own terms and privacy notice before any team’s data goes in. Crimp · Open source, with no service to sign up for. Its licence governs the code: see [03 · Open-source licences](https://www.deimoscore.com/legal/#lg3). - #### Open-source licences Ratchet and Crimp are published under the Apache License 2.0. The licence file in each repository governs the code, and it allows use, change and redistribution under its conditions. Ratchet · Apache-2.0 [Ratchet’s LICENSE on GitHub ↗](https://github.com/thearchitect0x-glitch/ratchet/blob/main/LICENSE) Crimp · Apache-2.0 [Crimp’s LICENSE on GitHub ↗](https://github.com/thearchitect0x-glitch/crimp/blob/main/LICENSE) - #### Trademarks Deimos, Clockford™, Ratchet, Crimp and Marklode are trademarks of Deimos AI LLC. Other names belong to their owners. No endorsement implied. You may use our names to refer to us and our work, as the [brand page](https://www.deimoscore.com/brand/) describes. - #### Patents Crimp and Clockford™: patent pending. Crimp’s code stays open under its licence. Crimp PATENT PENDING Clockford™ PATENT PENDING - #### Cookies and storage This site sets no cookies. Some pages read your browser’s cookies only to show you the count, which is 0. It runs no analytics and no trackers. Two display preferences, deimos.motion and deimos.sound, are saved in your own browser’s local storage, only when you change them, and they never leave your device. Because nothing here needs consent, there’s no cookie banner. [The privacy page counts it live](https://www.deimoscore.com/privacy/#pvCheckTitle), in your browser, and holds the full statement. - #### Legal questions Questions about anything on this page: any line on the [contact page](https://www.deimoscore.com/contact/). - #### Changes If this page changes, the new revision gets a new letter and date at the top, and the change is logged in [the Record’s changelog](https://www.deimoscore.com/record/#changelog). In force 2026-10-19 --- # Sitemap · Every page on deimoscore.com · Deimos AI URL: https://www.deimoscore.com/sitemap/ Updated: 2026-10-20T13:42:00Z Sitemap · Deimos AI LLC ## Every page. The whole site in one list: the instruments by division, the company, the Record, the Newsroom and Field Notes, and the files written for machines. ### Instruments, by division #### Division I · Control - [Clockford™](https://www.deimoscore.com/clockford/) OVERSIGHT SCHEDULED - [Ratchet](https://www.deimoscore.com/ratchet/) ONCE LIVE - [Crimp](https://www.deimoscore.com/crimp/) ACCOUNTABLE OPEN SOURCE #### Division II · Evidence - [Marklode](https://www.deimoscore.com/marklode/) RECON LIVE - [M.A.X](https://www.deimoscore.com/max/) BASELINE IN THE LAB - [Project Vessel](https://www.deimoscore.com/vessel/) LOOKOUT IN THE LAB #### Division III · Research - [The Pastel Series](https://www.deimoscore.com/pastel/) CRITERIA RESEARCH - [NeuroPhonics Module 1](https://www.deimoscore.com/neurophonics/) RESONANCE SIMULATION - [The Lab](https://www.deimoscore.com/lab/) SEALED SEALED ### The company - [Mission Control](https://www.deimoscore.com/) - [The Company](https://www.deimoscore.com/company/) - [Open a channel](https://www.deimoscore.com/contact/) - [Brand & press](https://www.deimoscore.com/brand/) - [Legal](https://www.deimoscore.com/legal/) - [Privacy](https://www.deimoscore.com/privacy/) - [Terms of use](https://www.deimoscore.com/terms/) ### On the record - [The Record](https://www.deimoscore.com/record/) - [Tonight’s Deimos](https://www.deimoscore.com/record/ephemeris/) - [Security](https://www.deimoscore.com/security/) - [Glossary](https://www.deimoscore.com/glossary/) - [Sitemap](https://www.deimoscore.com/sitemap/) ### Newsroom - [Newsroom](https://www.deimoscore.com/newsroom/) - [NR-02 · The October recount](https://www.deimoscore.com/newsroom/2026-10-20-the-october-mcp-registry-recount/) 2026-10-20 - [NR-01 · The signed claims ledger](https://www.deimoscore.com/newsroom/2026-10-20-deimoscore-com-publishes-a-signed-public-claims-ledger/) 2026-10-20 ### Field Notes - [Field Notes](https://www.deimoscore.com/field-notes/) - [At most once](https://www.deimoscore.com/field-notes/at-most-once/) 01 · 2026-10-18 - [Unknown never seals](https://www.deimoscore.com/field-notes/unknown-never-seals/) 02 · 2026-10-18 - [What 45,156 MCP servers tell you, and what they don’t](https://www.deimoscore.com/field-notes/mcp-servers-census/) 03 · 2026-10-18 - [Why M.A.X does not detect deception](https://www.deimoscore.com/field-notes/why-max-does-not-detect-deception/) 04 · 2026-10-18 - [Assume something is already inside](https://www.deimoscore.com/field-notes/assume-something-is-already-inside/) 05 · 2026-10-18 ### Machine-readable - [/sitemap.xml](https://www.deimoscore.com/sitemap.xml) The sitemap index: one sitemap per section, each page with the date its content last changed. - [/record/feed.xml](https://www.deimoscore.com/record/feed.xml) The Record’s changelog, as an Atom feed. - [/field-notes/feed.xml](https://www.deimoscore.com/field-notes/feed.xml) Field Notes, as an Atom feed. - [/newsroom/feed.xml](https://www.deimoscore.com/newsroom/feed.xml) The Newsroom, as an Atom feed. - [/llms.txt](https://www.deimoscore.com/llms.txt) A summary of this site for language models. - [/llms-full.txt](https://www.deimoscore.com/llms-full.txt) The text of every page in one file. - [/data/claims.json](https://www.deimoscore.com/data/claims.json) The claims ledger, machine-readable. - [/data/claims.json.sig](https://www.deimoscore.com/data/claims.json.sig) Its detached Ed25519 signature. - [/.well-known/deimos-record.pub](https://www.deimoscore.com/.well-known/deimos-record.pub) The public key that checks the signature. - [/.well-known/security.txt](https://www.deimoscore.com/.well-known/security.txt) How to report a vulnerability (RFC 9116). - [/robots.txt](https://www.deimoscore.com/robots.txt) Which crawlers may read this site: all of them, the major ones by name. --- # The claims ledger Machine-readable: https://www.deimoscore.com/data/claims.json - 2026: Deimos AI LLC founded [VERIFIED; Deimos AI public GitHub profile, https://github.com/thearchitect0x-glitch; as of 2026-10-18] https://www.deimoscore.com/record/#claim-deimos-founded - 2: Projects holding a self-certified OpenSSF Best Practices Silver badge (Ratchet, Crimp) [VERIFIED; OpenSSF Best Practices, projects 14440 and 14613, https://www.bestpractices.dev/projects/14440; as of 2026-10-20] https://www.deimoscore.com/record/#claim-openssf-silver-projects - Nov 10th, 2026: Clockford™ private beta opens, at midnight Pacific [SCHEDULED; clockford.com founding brief, https://clockford.com/founding/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-clockford-beta-opens - 10: Founding Startup seats in the first wave [SCHEDULED; clockford.com founding brief, https://clockford.com/founding/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-clockford-founding-seats - 2 to 20: Team size (people) for a Founding Startup, US-based, already running an AI agent [VERIFIED; clockford.com founding brief, https://clockford.com/founding/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-clockford-team-size - about 20 minutes a week: Founder feedback time asked of a Founding Startup [VERIFIED; clockford.com founding brief, https://clockford.com/founding/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-clockford-feedback-time - Patent pending: Clockford™ patent status [PATENT PENDING; Deimos AI LLC; as of 2026-10-18] https://www.deimoscore.com/record/#claim-clockford-patent - 1,000: Gated effects a month on Ratchet's free plan, no card, on a workspace whose email has been confirmed [VERIFIED; ratchetgate.com pricing, https://ratchetgate.com/pricing; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-free-effects - 2: HTTP calls to gate an action: one before, one after [VERIFIED; ratchetgate.com, https://ratchetgate.com; as of 2026-10-18] https://www.deimoscore.com/record/#claim-ratchet-http-calls - 100: Concurrent charge attempts by a simulated runaway agent (a script standing in for an agent loop) against a surge ceiling of 20 per hour, published run on the live service [VERIFIED; Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop), https://ratchetgate.com/notes/what-happens-when-step-five-fails; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-run-attempts - 20: Attempts executed in that run: the gate’s execute decisions (the transcript’s “reached the vendor”; the run’s script calls no vendor, so it charged nothing) [VERIFIED; Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop), https://ratchetgate.com/notes/what-happens-when-step-five-fails; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-run-executed - 80: Attempts denied at the gate in that run [VERIFIED; Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop), https://ratchetgate.com/notes/what-happens-when-step-five-fails; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-run-denied - 341 ms: Time to settle all 100 attempts in that run [VERIFIED; Ratchet note: "What happens when step five fails" (section: Two: a loop that will not stop), https://ratchetgate.com/notes/what-happens-when-step-five-fails; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-run-ms - 14440: OpenSSF Best Practices project ID, Silver badge (self-certified) [VERIFIED; bestpractices.dev, https://www.bestpractices.dev/projects/14440; as of 2026-10-20] https://www.deimoscore.com/record/#claim-ratchet-openssf - Apache-2.0: Ratchet source licence [VERIFIED; GitHub repository, https://github.com/thearchitect0x-glitch/ratchet; as of 2026-10-18] https://www.deimoscore.com/record/#claim-ratchet-licence - ratchet-mcp: Ratchet's MCP server, published on npm [VERIFIED; npm registry, https://www.npmjs.com/package/ratchet-mcp; as of 2026-10-18] https://www.deimoscore.com/record/#claim-ratchet-npm - v0.1.0: Crimp's latest signed release [VERIFIED; GitHub releases, https://github.com/thearchitect0x-glitch/crimp/releases; as of 2026-10-18] https://www.deimoscore.com/record/#claim-crimp-release-version - 13 Sep 2026: Crimp v0.1.0 signed release published [VERIFIED; GitHub releases, https://github.com/thearchitect0x-glitch/crimp/releases; as of 2026-10-18] https://www.deimoscore.com/record/#claim-crimp-release-date - 14613: OpenSSF Best Practices project ID, Silver badge (self-certified) [VERIFIED; bestpractices.dev, https://www.bestpractices.dev/projects/14613; as of 2026-10-20] https://www.deimoscore.com/record/#claim-crimp-openssf - Apache-2.0: Crimp source licence [VERIFIED; GitHub repository LICENSE, https://github.com/thearchitect0x-glitch/crimp/blob/main/LICENSE; as of 2026-10-18] https://www.deimoscore.com/record/#claim-crimp-licence - Patent pending: Crimp patent status [PATENT PENDING; Deimos AI LLC; as of 2026-10-18] https://www.deimoscore.com/record/#claim-crimp-patent - a76f21d53944…38a6: SHA-256 of the Crimp v0.1.0 release tarball (crimp-v0.1.0.tar.gz) [VERIFIED; GitHub release asset crimp-v0.1.0.tar.gz.sha256, https://github.com/thearchitect0x-glitch/crimp/releases/tag/v0.1.0; as of 2026-10-18] https://www.deimoscore.com/record/#claim-crimp-release-sha256 - 52.8 million: Prior authorization determinations made by Medicare Advantage insurers in 2024 [VERIFIED; KFF analysis of CMS Medicare Advantage (Part C) reporting data, published 28 Jan 2026, https://www.kff.org/medicare/medicare-advantage-insurers-made-nearly-53-million-prior-authorization-determinations-in-2024/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-kff-pa-determinations - 7.7%: Share of those requests denied in full or in part [VERIFIED; KFF analysis of CMS Medicare Advantage (Part C) reporting data, published 28 Jan 2026, https://www.kff.org/medicare/medicare-advantage-insurers-made-nearly-53-million-prior-authorization-determinations-in-2024/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-kff-pa-denied-share - 11.5%: Share of denied requests that were appealed [VERIFIED; KFF analysis of CMS Medicare Advantage (Part C) reporting data, published 28 Jan 2026, https://www.kff.org/medicare/medicare-advantage-insurers-made-nearly-53-million-prior-authorization-determinations-in-2024/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-kff-pa-appealed-share - 80.7%: Share of appeals that overturned the denial in full or in part [VERIFIED; KFF analysis of CMS Medicare Advantage (Part C) reporting data, published 28 Jan 2026, https://www.kff.org/medicare/medicare-advantage-insurers-made-nearly-53-million-prior-authorization-determinations-in-2024/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-kff-pa-overturned-share - 156,111: Public MCP registry entries counted [VERIFIED; Marklode MCP registry census, October 2026 recount, https://api.marklode.com/v1/stats; as of 2026-10-17] https://www.deimoscore.com/record/#claim-marklode-registry-entries - 45,156: Distinct MCP servers behind those entries, after deduplication [VERIFIED; Marklode MCP registry census, October 2026 recount, https://api.marklode.com/v1/stats; as of 2026-10-17] https://www.deimoscore.com/record/#claim-marklode-servers - 13,383: MCP servers with no public source repository [VERIFIED; Marklode MCP registry census, October 2026 recount, https://api.marklode.com/v1/stats; as of 2026-10-17] https://www.deimoscore.com/record/#claim-marklode-no-repo - 29.6%: Share of MCP servers with no public source repository [VERIFIED; Marklode MCP registry census, October 2026 recount, https://api.marklode.com/v1/stats; as of 2026-10-17] https://www.deimoscore.com/record/#claim-marklode-no-repo-share - 101,219: Public MCP registry entries in the first census [VERIFIED; Marklode MCP registry census, first count (public registry APIs, 12 Sep 2026); as of 2026-09-12] https://www.deimoscore.com/record/#claim-marklode-sep-entries - 31,309: Distinct MCP servers behind them in the first census [VERIFIED; Marklode MCP registry census, first count (public registry APIs, 12 Sep 2026); as of 2026-09-12] https://www.deimoscore.com/record/#claim-marklode-sep-servers - 24 to 72 hours: Marklode report turnaround, by package [VERIFIED; marklode.com, https://marklode.com; as of 2026-10-18] https://www.deimoscore.com/record/#claim-marklode-turnaround - six: Channels M.A.X reads on one timeline: face, eyes, voice, speech, body, pulse [IN THE LAB; M.A.X design lines; as of 2026-10-18] https://www.deimoscore.com/record/#claim-max-channels - thirty days: Default retention for what Vessel read from public sources [IN THE LAB; Vessel retention setting (30-day default) and README scope; as of 2026-10-18] https://www.deimoscore.com/record/#claim-vessel-retention - Thresholds reasoned, not yet measured; not yet tested against adjudicated cases: Vessel validation status [UNPROVEN; Vessel user manual §8; as of 2026-10-18] https://www.deimoscore.com/record/#claim-vessel-validation - 2026-10-18: Project Vessel, NeuroPhonics Module 1 and the Pastel Series released from the Lab to their own pages [VERIFIED; The Lab release stamps, https://www.deimoscore.com/lab/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-lab-release-date - four: Files still sealed in the Lab, unnamed [SEALED; The Lab, https://www.deimoscore.com/lab/; as of 2026-10-19] https://www.deimoscore.com/record/#claim-lab-sealed-files - 213.8 Hz: Centre frequency of the resonance planted in the synthetic signal [SIMULATION; NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…, https://www.deimoscore.com/data/neurophonics.json; as of 2026-10-18] https://www.deimoscore.com/record/#claim-neurophonics-planted-hz - 213.800 Hz: Matched-FM fit of that centre frequency (synthetic signal) [SIMULATION; NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…, https://www.deimoscore.com/data/neurophonics.json; as of 2026-10-18] https://www.deimoscore.com/record/#claim-neurophonics-fit-hz - 0.013 Hz: Mean absolute error of the matched-FM track against the planted frequency (synthetic signal) [SIMULATION; NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…, https://www.deimoscore.com/data/neurophonics.json; as of 2026-10-18] https://www.deimoscore.com/record/#claim-neurophonics-fit-error - −3.0 dB: Self-check gate refuses to report when coherent SNR is below this (synthetic signal) [SIMULATION; NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…, https://www.deimoscore.com/data/neurophonics.json; as of 2026-10-18] https://www.deimoscore.com/record/#claim-neurophonics-gate-snr - 0.70: Self-check gate refuses to report when model fit quality is below this (synthetic signal) [SIMULATION; NeuroPhonics Module 1 run export (synthetic signal) · sha256 edd67f3f…, https://www.deimoscore.com/data/neurophonics.json; as of 2026-10-18] https://www.deimoscore.com/record/#claim-neurophonics-gate-fit - 30.30 h: Orbital period of the moon Deimos around Mars (1.2625 days) [VERIFIED; NASA/JPL Solar System Dynamics, planetary satellite mean elements, https://ssd.jpl.nasa.gov/sats/elem/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-deimos-moon-period - 23,457 km: Semi-major axis of Deimos's orbit around Mars [VERIFIED; NASA/JPL Solar System Dynamics, planetary satellite mean elements, https://ssd.jpl.nasa.gov/sats/elem/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-deimos-moon-orbit-radius - 402: NASA/JPL Horizons body ID for Deimos, the source of every live position on this site [LIVE; NASA/JPL Horizons, https://ssd.jpl.nasa.gov/horizons/; as of 2026-10-18] https://www.deimoscore.com/record/#claim-deimos-moon-horizons-id --- # The Record's changelog Atom: https://www.deimoscore.com/record/feed.xml - CL-13 · 2026-10-20 · Revised: The note on the private beta’s opening date no longer says clockford.com calls the event a closed beta: since 20 Oct 2026, clockford.com says private beta too. The date and time are unchanged. - CL-12 · 2026-10-20 · Published: The Newsroom opens: dated announcements, each backed by an entry here, with a fact sheet generated from the ledger and the press kit. It has its own Atom feed. The site is served at www.deimoscore.com, and deimoscore.com redirects there. - CL-11 · 2026-10-20 · Published: For readers and crawlers: Field Notes now has its own Atom feed; every page is listed at /sitemap/; the text of every page is in one file, /llms-full.txt; and /sitemap.xml is now an index of one sitemap per section, whose dates move only when a page’s own content changes. robots.txt now names the search, answer and training crawlers it admits, and admits them all. This changelog’s feed re-issued its entry ids once, so a feed reader may show these entries again. - CL-10 · 2026-10-20 · Revised: The published Ratchet run’s ledger rows now say what their source says: a simulated runaway agent (a script standing in for an agent loop) fired 100 concurrent charge attempts against a surge ceiling of 20 per hour; 20 executed and 80 were denied at the gate, all 100 settled in 341 ms. The rows previously said “against a budget” (changed 20 Oct without an entry here), then “by a looping agent”, and “reached the vendor”; the run’s script calls no vendor, so it charged nothing. The Ratchet FAQ, the replay on the Ratchet page and the home page’s card for the run now say the same. The status legend now defines Patent pending, which two rows already use. The Clockford™ opening row now says private beta, as CL-03 does, and the OpenSSF rows, like every mention of the badge on this site, now say the Silver badge is self-certified. The free-plan row now says its 1,000 gated effects a month apply on a workspace whose email has been confirmed, and the founding row’s label now reads “Deimos AI LLC founded”. - CL-09 · 2026-10-19 · Revised: Privacy notice P-0 Rev B: new clause 05, the Marklode checker. The site’s Content-Security-Policy now lets /marklode/ connect to https://api.marklode.com/v1/verify, only after you press Check. Clause 06 now also lists the Ratchet replay’s run file and the files the Record fetches when you press Verify, all from this site. - CL-08 · 2026-10-19 · Signed: Release builds now sign the claims ledger: the exact bytes of /data/claims.json, with Ed25519, and the signature is published at /data/claims.json.sig. The public key is /.well-known/deimos-record.pub, its fingerprint printed in the seal. The signed file states the date it was built and the newest changelog entry it includes. A new key will always be logged here. This changelog is now also an Atom feed. - CL-07 · 2026-10-19 · Published: Legal published (LG-0, Rev A): which terms govern this site and each instrument, the open-source licences, trademarks, patents, and cookies and storage. Every page now names our live sites and GitHub in its menu and footer. - CL-06 · 2026-10-18 · Published: Company pages published: The Company, Open a channel, Brand & press, the privacy notice (P-0, Rev A) and the terms of use (T-0, Rev A). Disclosure contacts published at /.well-known/security.txt. - CL-05 · 2026-10-18 · Release: The site becomes a public record: every public number now lives in one ledger with its status, source and date. Project Vessel, NeuroPhonics Module 1 and the Pastel Series are released from the Lab to their own pages. Tonight's Deimos joins every page, from NASA/JPL Horizons. - CL-04 · 2026-10-17 · Recount: Marklode census recount: 45,156 servers behind 156,111 public MCP registry entries; 29.6% with no public repo. - CL-03 · 2026-10-17 · Announcement: Clockford™ Founding Startups announced: 10 seats for the private beta that opens Nov 10th, 2026. - CL-02 · 2026-09-13 · Release: Crimp v0.1.0 published as a signed, open-source release (Apache-2.0). - CL-01 · 2026-09-12 · Census: Marklode's first census of the public MCP registry: 31,309 servers behind 101,219 entries. Superseded by the October recount.